• Added with_crls function to AllowAnyAuthenticatedClient and AllowAnyAnonymousOrAuthenticatedClient client certificate verifiers to support revocation checking of client certificates using certificate revocation lists (CRLs).
• Exposed verify_signed_by_trust_anchor and verify_server_name certificate validation helper functions when using the "dangerous_configuration" feature.

What's Changed

• Localise DnsName types by @ctz in https://github.com/rustls/rustls/pull/1321
• Import DnsName types directly by @djc in https://github.com/rustls/rustls/pull/1323
• Fix connect-tests for 1000-sans.badssl.com by @ctz in https://github.com/rustls/rustls/pull/1324
• Moved to a working host by @xuganyu96 in https://github.com/rustls/rustls/pull/1328
• simple_0rtt_client: fix it and clarify what it is demonstrating by @ctz in https://github.com/rustls/rustls/pull/1330
• ci: run client examples in CI connect tests. by @cpu in https://github.com/rustls/rustls/pull/1331
• enums: clarify NamedCurve isn't supported curves. by @cpu in https://github.com/rustls/rustls/pull/1333
• Remove support for SCT stapling by @ctz in https://github.com/rustls/rustls/pull/1329
• Limit scope of security support based on time by @djc in https://github.com/rustls/rustls/pull/1315
• Enable unit-test-like benchmarks by @ctz in https://github.com/rustls/rustls/pull/1334
• expose verify helper functions by @Fritiofhedstrom in https://github.com/rustls/rustls/pull/1325
• Revert "Remove support for SCT stapling" by @ctz in https://github.com/rustls/rustls/pull/1340
• client certificate revocation checking support. by @cpu in https://github.com/rustls/rustls/pull/1326

New Contributors

• @xuganyu96 made their first contribution in https://github.com/rustls/rustls/pull/1328
• @Fritiofhedstrom made their first contribution in https://github.com/rustls/rustls/pull/1325

Full Changelog: https://github.com/rustls/rustls/compare/v/0.21.2...v/0.21.3