aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRyan Hooper <[email protected]>2026-10-21 19:20:45 +0200
committerTomas Mraz <[email protected]>2026-10-22 16:56:39 +0200
commit3a3d515f821b8032cc5fef7a0c1fc960d384de9d (patch)
tree2123471235b7c19510ad7f637d50b7d0afcd8918
parentDTLS listener: do not drive idle pending connections every tick (diff)
downloadopenssl-3a3d515f821b8032cc5fef7a0c1fc960d384de9d.tar.gz
openssl-3a3d515f821b8032cc5fef7a0c1fc960d384de9d.zip
Document DTLS listener error-reporting known issues
Add OpenSSL 4.1.0 release notes for permanent receive failures reported as retries and retryable writes reported as fatal errors on connections accepted from DTLS listeners. Refs: #33277 Refs: #33278 Assisted-by: OpenAI:gpt-6-astra Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Milan Broz <[email protected]> Merge-date: Thu Oct 22 14:56:47 2026 Merged-from: https://github.com/openssl/openssl/pull/33295
-rw-r--r--NEWS.md12
1 files changed, 12 insertions, 0 deletions
diff --git a/NEWS.md b/NEWS.md
index c483f705459..e192ea35b70 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -87,6 +87,18 @@ Known issues in 4.1.0
transmission is lost. A fix is in progress and planned for a future
release.
+ * <https://github.com/openssl/openssl/issues/33277>
+ A permanent receive failure on a DTLS listener can be reported as
+ `SSL_ERROR_WANT_READ` on an accepted connection. Polling and subsequent
+ accept calls may also fail to report the error, causing applications
+ to continue waiting after a permanent failure.
+
+ * <https://github.com/openssl/openssl/issues/33278>
+ A retryable write failure on a nonblocking connection accepted from a
+ DTLS listener can be reported as `SSL_ERROR_SYSCALL` instead of
+ `SSL_ERROR_WANT_WRITE`. Applications treating this result as fatal may
+ close a connection that is still usable.
+
OpenSSL 4.0
-----------