All pull requests

Pull requests

• Backport 4.1: Reject out-of-bounds ALPN length in ssl_context_load

  #10991·nvxbug opened Oct 4, 2026Contributor·6 tasks done·

  ·

• Backport 3.6: Reject out-of-bounds ALPN length in ssl_context_load

  #10990·nvxbug opened Oct 4, 2026Contributor·4 tasks done·

  ·

• Accept a cookie extension in a TLS 1.3 HelloRetryRequest

  #10989·JC-000 opened Oct 4, 2026·1 of 6 tasks·

  ·
  1

• [4.1] Test the SHA-256 crypto extensions with GCC and a fortified libc

  #10988·JuliusBairaktaris opened Oct 3, 2026·6 tasks done·

  ·
  1

• Test the SHA-256 crypto extensions with GCC and a fortified libc

  #10987·JuliusBairaktaris opened Oct 3, 2026·6 tasks done·

  ·
  1

• [3.6] sha256: keep the target CPU when enabling the crypto extensions

  #10986·JuliusBairaktaris opened Oct 3, 2026·6 tasks done·

  ·
  1

• Backport 4.1: x509_crt: accept empty AuthorityKeyIdentifier sequence

  #10985·MechatronikMonkey opened Oct 3, 2026·5 tasks done·

  ·

• Backport 3.6: x509_crt: accept empty AuthorityKeyIdentifier sequence

  #10984·MechatronikMonkey opened Oct 3, 2026·4 tasks done·

  ·

• Reject a CSR whose CertificationRequestInfo is not fully consumed

  #10983·nvxbug opened Oct 2, 2026Contributor·6 of 8 tasks·

  ·

• Bind new TLS 1.3 tickets to the ALPN of the current connection

  bugcomponent-tlsneeds-reviewneeds-reviewerpriority-medium
  #10980·stanleys12 opened Oct 1, 2026·6 of 7 tasks·

  ·
  1

• Backport: Fix x509 profile pk sigalg 4.1

  needs-reviewneeds-reviewerpriority-low
  #10979·v1rtu3x opened Sep 29, 2026·2 of 6 tasks·

  ·
  1

• Reject empty ECDHE ClientKeyExchange before reading its length byte

  bugneeds-backportsneeds-cineeds-reviewneeds-reviewersize-s
  #10978·nvxbug opened Sep 29, 2026Contributor·6 of 8 tasks·

  ·
  10

• lms/lmots: apply the same output-buffer zeroization consistently

  bugcomponent-cryptoneeds-cineeds-workpriority-lowsize-s
  #10976·Johnsonajibi opened Sep 27, 2026·

  ·

• sha256: fold high bits of ilen into total[1] on 64-bit platforms

  bugcomponent-cryptoneeds-backportsneeds-cineeds-reviewneeds-reviewerneeds-workpriority-mediumsize-s
  #10975·Johnsonajibi opened Sep 27, 2026·7 tasks done·

  ·
  15

• x509_crt: accept empty AuthorityKeyIdentifier sequence

  approvedbugcomponent-x509needs-backportspriority-mediumsize-s
  #10974·MechatronikMonkey opened Sep 26, 2026·5 of 7 tasks·

  ·
  1

  4

• Fix DER certificate output on Windows

  approvedneeds-backportsneeds-cisize-xs
  #10973·saadgodikat opened Sep 25, 2026·

  ·
  1

  2

• MLDSA support: pqcp include path and mldsa key slot component test

  needs-workpriority-highsize-xs
  #10972·rohankl-arm opened Sep 25, 2026·6 of 7 tasks·

  ·
  5

• [4.1] Parenthesize arguments of TLS 1.2 sig/hash alg macros

  bugneeds-backportsneeds-reviewneeds-reviewerpriority-mediumsize-xs
  #10970·barakgut opened Sep 24, 2026·5 tasks done·

  ·
  1

• [3.6] Parenthesize arguments of TLS 1.2 sig/hash alg macros

  bugneeds-backportsneeds-reviewneeds-reviewerpriority-mediumsize-xs
  #10969·barakgut opened Sep 24, 2026·4 tasks done·

  ·
  1

• Parenthesize arguments of TLS 1.2 sig/hash alg macros

  bugneeds-backportsneeds-reviewneeds-reviewerpriority-mediumsize-xs
  #10968·barakgut opened Sep 24, 2026·7 tasks done·

  ·
  1

  1

• Fix TLS 1.3 handshakes with opaque PSKs

  bugcomponent-tls13size-s
  #10967·v1rtu3x opened Sep 23, 2026·5 of 7 tasks·

  ·
  1

  1

• Backport 3.6: Fix resource leak in populate transform

  needs-reviewneeds-reviewerpriority-highsize-s
  #10966·bjwtaylor opened Sep 23, 2026Contributor·7 tasks·

  ·
  1

• Backport 4.1: Fix resource leak in populate transform

  needs-reviewneeds-reviewerpriority-highsize-s
  #10965·bjwtaylor opened Sep 23, 2026Contributor·7 tasks·

  ·
  1

• Validate timestamps in mbedtls_x509write_crt_set_validity

  component-x509enhancementneeds-cipriority-mediumsize-s
  #10959·nvxbug opened Sep 20, 2026Contributor·5 of 7 tasks·

  ·
  1

• Use relative URLs for the framework and tf-psa-crypto submodules

  needs-cineeds-design-approvalneeds-reviewneeds-reviewerpriority-lowsize-xs
  #10953·parmi93 opened Sep 15, 2026·

  ·
  2