diff options
| author | Ryan Hooper <[email protected]> | 2026-10-21 19:27:28 +0200 |
|---|---|---|
| committer | Tomas Mraz <[email protected]> | 2026-10-22 16:58:33 +0200 |
| commit | 7501955b0b2fbd6e7348bc8166055993d73af64e (patch) | |
| tree | 466099c8d9eb5bc9ac86b8b778082b98c18dd233 | |
| parent | Document DTLS listener error-reporting known issues (diff) | |
| download | openssl-7501955b0b2fbd6e7348bc8166055993d73af64e.tar.gz openssl-7501955b0b2fbd6e7348bc8166055993d73af64e.zip | |
Document DTLS 1.3 handshake ACK known issue
Note that servers may reject ACKs received while waiting for the
client's handshake response.
Refs: #33242
Refs: #33267
Assisted-by: OpenAI:gpt-6-astra
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Milan Broz <[email protected]>
Merge-date: Thu Oct 22 14:58:41 2026
Merged-from: https://github.com/openssl/openssl/pull/33296
| -rw-r--r-- | NEWS.md | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -99,6 +99,12 @@ Known issues in 4.1.0 `SSL_ERROR_WANT_WRITE`. Applications treating this result as fatal may close a connection that is still usable. + * <https://github.com/openssl/openssl/issues/33242> + DTLS 1.3 servers may abort handshakes with an `unexpected_message` alert + when a client acknowledges part or all of the server's first flight + before sending its response. This can occur after packet loss or while + the client is preparing its authentication response. + OpenSSL 4.0 ----------- |