v2.1.4

This release includes fixes for two security issues reported by the Mattermost security team. We'd like to thank them for the responsible disclosure and urge any consumers of the DTLS package to update.

• GHSA-cm8f-h6j3-p25c
• GHSA-cx94-mrg9-rq4j

v2.1.0

• Add support for stateful session resumption

v2.0.13

• Upgrade pion/transport to fix a deadlock

v2.0.12

• Do not include supported_groups extension in ServerHello

v2.0.11

• Do not include IP addresses as SNI values

v2.0.9

• Allow for and validate RSA private keys

v2.0.8

• Add a new KeyLogWriter in #344
  This makes it possible to log TLS master keys somewhere, which is useful for debugging using tools like Wireshark. This mirrors the KeyLogWriter on tls.Config in the Go standard library

v2.0.7

• A follow up from #314, which ensures we include NegotationInfo in the ServerHello

v2.0.6

• Ensure we include RenegotiationInfo in ServerHello and indicate we don't support renegotiation

v2.0.5

• General reorganisation of the library
• Properly handle empty extension lists in Server/ClientHello
• Add support for TLS_PSK_WITH_AES_128_CBC_SHA256
• Allow both PSK as well as certificate based connections on the same server/connection
• Add the PSK Client Hint on the connection state
• Add support for anonymous ciphers
  We don't and will not carry anonymous ciphers in this library, but it's now possible to plug in your own if you have a use case that requires it