master
Bug 1908990 - Remove OS2 support just like we did on NSPR r=nss-reviewers,jschanck
Bug 1930806 FIPS changes need to be upstreamed: force ems policy
Bug 1774654 tstclnt crashes when accessing gnutls server without a user cert in the database.
Bug 1480647 - Warn about deprecation of key.h and keyt.h. Include keyhi.h instead of key.h, and keythi.h instead of keyt.h. r=rrelyea
Bug 2031756 - Backed out changeset 0c15a0d01cae
Bug 1792821 - Modification of the primes.c and dhe-params.c in order to have better looking tables r=jschanck
Bug 2020613 - release xmit buf lock on dtls13_MaybeSendKeyUpdate error paths. r=nkulatova
Bug 1809872 - Modification the DTLS1.3 Message: Sending epoch and seqNum separately as two uint64 r=djackson
Bug 2033783 - reject DTLS 1.3 Server Hello after HVR without capping ss->vrange.max. r=nss-reviewers,nkulatova
Bug 1797503 - Solving KeyUpdate tests defects r=djackson
Bug 1385146 - Experimental API, r=ekr
Bug 1983320 ml-dsa: move tls 1.3 to use streaming signatures
Bug 1228555 - Remove support for SSLv2 r=mt,wtc,ekr
Bug 1248470, NSS clang-format: lib/ssl, EXCEPT ssl3con.c, r=kaie
Bug 1399439 - API for external TLS session caches, r=mt
Fix build issues, a=bustage
Bug 1617956 - Add support for asynchronous client auth hooks. r=mt
Bug 2031756 - Backed out changeset 83110dba958b
Bug 845556, reorganize NSS directory layout, moving files, very large changeset! r=wtc
Bug 2054609 - remove cipher suite order exception from bug 946147. r=djackson
Bug 2019001 - add support for ML-KEM-1024 named group. r=djackson
Bug 2027373 - guard space subtraction in ssl_CallCustomExtensionSenders. r=nss-reviewers,rrelyea
Bug 2026089 - Clarify extension negotiation mechanism for TLS Handshakes r=#nss-reviewers
Bug 2045688 - Modify an assertion in ssl3_ClientSendAppProtoXtn r=djackson
Bug 1654332 - Update ESNI to draft-08 (ECH). r=mt
Bug 1818222 - Removing DTLS_1_3_DRAFT_VERSION flag r=djackson
Bug 1295163 - Bloom filter for anti-replay, r=ekr
Bug 1540403 - draft-ietf-tls-subcerts-03, r=mt,jcj
Bug 2030102 - avoid leaving a dangling ss->sec.ci.sid on allocation failure. r=nss-reviewers,keeler
Bug 1917311 - part 2: run clang-format. r=nss-reviewers,bbeurdouche
Bug 1871631 - add libssl support for xyber768d00. r=djackson
Bug 2054714 - avoid leaking stale ECH outer extensions across HRR. r=djackson
Bug 1771100 - Added EarlyData ALPN test support to BoGo shim. r=djackson
Bug 1563221 remove older oses that are unused part3/ BeOS r=nss-reviewers,djackson
Bug 2054731 - reject resumption tokens where wrapped_master_secret_len is too long r=jschanck
Bug 1903373 - fix several scan-build warnings. r=nss-reviewers,rrelyea
Bug 1712883 - DTLS 1.3 draft-43 r=bbeurdouche
Bug 2037205 - acquire RWLock before key copies in ssl_SetSelfEncryptKeyPair r=nss-reviewers,bbeurdouche
Bug 1797503 - KeyUpdate support r=djackson,mt
Bug 1169174, Remove __DATE__ and __TIME__ references from NSS, r=rrelyea
Bug 2052288 - clear greaseEchBuf after constructing HRR. r=djackson
Bug 1818235 - DTLS1.3 Nonce consists only of a sequence number r=djackson
Bug 1927351 - add ECH_SECRET and ECH_CONFIG to SSLKEYLOG for both client and server. r=nss-reviewers,djackson
Bug 1713562 - Validate ECH public names, r=bbeurdouche
Bug 1386096 - Semi-stateless HelloRetryRequest, r=mt
Bug 1548723 - TLS Certificate Compression (RFC 8879) Implementation r=nss-reviewers,keeler,djackson
Bug 1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH server accept_confirmation bugs. r=djackson
Bug 1728281 - Add ECH-13 HRR Handling. r=mt
Bug 2053831 - Adjust PK11_Derive and TLS 1.3 derivation templates for CKM_HKDF_DATA and CKO_DATA compliance. r=rrelyea
Bug 1608892 - Update DTLS 1.3 to draft-34 r=mt
Bug 1603042 - Support external PSKs in tstclnt/selfserv. r=jcj
Bug 1603042 - TLS 1.3 out-of-band PSK support r=mt
Bug 2029885 - avoid leaving dangling pointer in tls_DestroySignOrVerifyContext. r=rrelyea
Bug 2051939 - null check extension array in tls13_CheckCertDelegationUsage. r=nss-reviewers,nkulatova