fix(network): harden TLS and DTLS security configuration - #2162

Merged

mbuckton merged 19 commits into

developmentfrom

MAPS-0-tls-dtls-security

Aug 7, 2026

Commits on Aug 7, 2026

feat(config): make outbound TLS hostname checks configurable
mbuckton
committed
a309f35
fix(config): resolve TLS and DTLS security profiles correctly
mbuckton
committed
f85807f
fix(config): make key-store updates null safe
mbuckton
committed
c43f5de
fix(config): apply nested TLS settings during updates
mbuckton
committed
ea5379d
fix(config): load and update nested DTLS settings
mbuckton
committed
6ccff26
fix(network): retain configured DTLS client authentication
mbuckton
committed
0e3ebc4
fix(network): expose authenticated DTLS peer identity
mbuckton
committed
6e04810
fix(network): expose optional TLS client identity
mbuckton
committed
bd58392
fix(network): verify outbound TLS server hostnames
mbuckton
committed
c9f32f4
fix(config): apply endpoint updates to stored state
mbuckton
committed
454e7ec
docs(config): enable TLS hostname verification by default
mbuckton
committed
57ee042
test(config): cover TLS and DTLS profile updates
mbuckton
committed
eb4ae20
test(network): cover outbound TLS hostname verification
mbuckton
committed
6e40853
refactor(network): isolate DTLS engine parameters
mbuckton
committed
f586088
test(network): preserve DTLS client certificate policy
mbuckton
committed
f875f67
test(config): apply endpoint updates to stored state
mbuckton
committed
87e31fd
fix(config): preserve generic TLS protocol negotiation
mbuckton
committed
6c52d6d
fix(config): allow DTLS context values in SSL DTO
mbuckton
committed
c8044ae
test(config): use supported DTLS context
mbuckton
committed
620900e

Navigation Menu

Uh oh!

fix(network): harden TLS and DTLS security configuration - #2162

fix(network): harden TLS and DTLS security configuration#2162
mbuckton merged 19 commits into
developmentfrom
MAPS-0-tls-dtls-security

Commits on Aug 7, 2026

feat(config): make outbound TLS hostname checks configurable

fix(config): resolve TLS and DTLS security profiles correctly

fix(config): make key-store updates null safe

fix(config): apply nested TLS settings during updates

fix(config): load and update nested DTLS settings

fix(network): retain configured DTLS client authentication

fix(network): expose authenticated DTLS peer identity

fix(network): expose optional TLS client identity

fix(network): verify outbound TLS server hostnames

fix(config): apply endpoint updates to stored state

docs(config): enable TLS hostname verification by default

test(config): cover TLS and DTLS profile updates

test(network): cover outbound TLS hostname verification

refactor(network): isolate DTLS engine parameters

test(network): preserve DTLS client certificate policy

test(config): apply endpoint updates to stored state

fix(config): preserve generic TLS protocol negotiation

fix(config): allow DTLS context values in SSL DTO

test(config): use supported DTLS context