release: 0.18.374

[MDA2AV]

All eleven published packages share one version, as always. The bump is only their Version elements; IoxideRuntime.Version is generated from ioxide.csproj. ioxide.redis.stackexchange is bumped too, so a manual pack matches, but CI does not pack it.

The minor goes to 18 for #373: TLS moves from the system OpenSSL to a BoringSSL that ships in the packages. The public API does not change; the behaviour that does is listed below.

Carries everything since 0.17.340:

• TCP: tcp: TcpOptions.SendWaitAll can turn MSG_WAITALL off, bound per connection at accept #362: TcpOptions.SendWaitAll can turn MSG_WAITALL off, bound per connection at accept.
• TLS:
  • tls, httpclient, quic: BoringSSL ships in the packages and replaces the system OpenSSL #373: BoringSSL ships in the packages and replaces the system OpenSSL, for the server, the HTTP client and the QUIC bundle: 15% less CPU per keep-alive request and 13% less per handshake. It also answers a client's close_notify with the server's own, and refuses a CipherSuites name that is not a TLS 1.3 suite (tls: a CipherSuites name that is not a TLS 1.3 suite is accepted, and the port then serves nobody #348).
  • tls: Complete on the TLS writer does not throw while the connection's flush is in flight #355: Complete on the TLS writer does not throw while the connection's flush is in flight.
  • tls: trust anchors given as PEM text are read the way the same bundle is read from a path #368: trust anchors given as PEM text are read the way the same bundle is read from a path.
  • tls, quic: an SNI host key no client can ask for is refused at startup, naming it #369: an SNI host key no client can ask for is refused at startup, naming it, on TCP and QUIC.
  • tls, quic, httpclient: a non-ASCII ALPN protocol name is refused at configuration instead of sent as other bytes #370: a non-ASCII ALPN protocol name is refused at configuration instead of sent as other bytes, on TCP, QUIC and the HTTP client.
  • tls (ktls rx): the handoff counts records once the batch is over and takes a cut record's rest, and close_notify reaches TlsSession.Closed #372: the kTLS RX handoff counts records once the batch is over and takes a cut record's rest, and close_notify reaches TlsSession.Closed.
• HTTP client:
  • httpclient: a certificate for ww*.example.com fails verification for www.example.com instead of matching it #356: a certificate for ww*.example.com fails verification for www.example.com instead of matching it.
  • httpclient: a refused server certificate says which check refused it #358: a refused server certificate says which check refused it.
  • httpclient: HandshakeTimeoutMs ends a TLS handshake whose peer accepted and went silent #366: HandshakeTimeoutMs ends a TLS handshake whose peer accepted and went silent.

Breaking

• API: none. Package validation against the 0.17.340 packages on NuGet (EnablePackageValidation, baseline 0.17.340) reports no break in the eleven packages. As a control, ioxide against 0.16.281 reports the known CreateTcp change.
• Behaviour:
  • tls, httpclient, quic: BoringSSL ships in the packages and replaces the system OpenSSL #373: TLS errors carry BoringSSL's reason names (NO_SHARED_CIPHER, CERTIFICATE_VERIFY_FAILED) instead of OpenSSL's sentences.
  • tls, httpclient, quic: BoringSSL ships in the packages and replaces the system OpenSSL #373: CipherSuites takes only the TLS 1.3 suites BoringSSL implements (AES-128-GCM, AES-256-GCM, ChaCha20-Poly1305): a TLS 1.2 name, a typo or a CCM suite now fails startup (tls: a CipherSuites name that is not a TLS 1.3 suite is accepted, and the port then serves nobody #348). CipherList uses BoringSSL's cipher strings, which have no DHE or CCM suites.
  • tls, httpclient, quic: BoringSSL ships in the packages and replaces the system OpenSSL #373: a client certificate over about 30 KB can no longer be served.
  • tls, httpclient, quic: BoringSSL ships in the packages and replaces the system OpenSSL #373, HTTP client: an origin reached by its address is verified against the certificate's iPAddress names and sent no SNI; a server name over 255 bytes fails the connect; MinimumVersion = 0 means TLS 1.2.
  • tls, quic: an SNI host key no client can ask for is refused at startup, naming it #369: an SNI host key no client can ask for fails startup.
  • tls, quic, httpclient: a non-ASCII ALPN protocol name is refused at configuration instead of sent as other bytes #370: a non-ASCII ALPN name fails configuration.
  • httpclient: a certificate for ww*.example.com fails verification for www.example.com instead of matching it #356: a partial wildcard no longer matches.
• Dependencies: ioxide no longer needs the system OpenSSL, and ioxide.ngtcp2 no longer needs libcrypto.so.3.

Native

• libioxide_boringssl.so (new, in ioxide, 3.3 MB): BoringSSL at 5b83e5d, built by scripts/build-boringssl-native.sh. It needs only libc.
• libioxide_ngtcp2.so: rebuilt by scripts/build-ngtcp2-native.sh on BoringSSL's libcrypto, linked in with its symbols hidden (1.2 MB -> 2.9 MB). It needs only libc.

The packages ship both libraries; consumers rebuild nothing. Checked from outside the repo: a net10.0 app referencing the packed ioxide 0.18.374 runs the docs' Tls/OpenSsl program and serves HTTPS (TLS 1.3, ECDSA). It loads libioxide_boringssl.so from the package's runtimes/linux-x64/native and never loads the system libssl.so.3.

On this branch's tree (main at e18120c, plus the bump), all eight suites pass with none skipped: E2E 288, Unit 82, Http 88, Tls 194, Chaos 79, File 5, Pg 18 and Redis 6. The tls module was loaded, so the kTLS tests ran.

Some tests stay pending. Each one pins a known gap and fails the run once the gap is fixed: E2E 5, Unit 1, Chaos 1, and Redis 1 (#336). The TLS and HTTP client suites have none left.