• New feature: API for determining whether a CertifiedKey's certificate and private key matches: keys_match(). This is called from existing fallible functions that accept a private key and certificate (for example, with_single_cert()) so these functions now detect this misconfiguration.

  This relies on a new -- optional -- member of the SigningKey trait: public_key() -- downstream implementers of this trait can opt-in to this behavior by implementing this method.

• New feature: API for determining which key exchange group a connection used: negotiated_key_exchange_group()

• New feature: Automatic sending of TLS1.3 key_update messages to avoid exceeding AEAD confidentiality limits. This is complemented with a new API for manual use, refresh_traffic_keys()

• Expose common connection items in unbuffered API (docs)

What's Changed

• docs: cross off client-side ECH from roadmap by @cpu in https://github.com/rustls/rustls/pull/2006
• fix(deps): update rust crate zlib-rs to 0.2 by @renovate-bot in https://github.com/rustls/rustls/pull/2005
• deps: use hickory-resolver 0.25 alpha release by @cpu in https://github.com/rustls/rustls/pull/2007
• chore(deps): update seanmiddleditch/gha-setup-ninja action to v5 by @renovate-bot in https://github.com/rustls/rustls/pull/2008
• (Examples) Bugfix: Use normal brackets to avoid docopt literal default by @ckcr4lyf in https://github.com/rustls/rustls/pull/2009
• docs: add ech-client.rs to examples/README.md by @cpu in https://github.com/rustls/rustls/pull/2011
• build(deps): bump curve25519-dalek from 4.1.2 to 4.1.3 by @dependabot in https://github.com/rustls/rustls/pull/2012
• Refactor integration tests to let rustfmt work by @ctz in https://github.com/rustls/rustls/pull/2014
• (Examples) Feature: Use port-prefix naming to lookup correct ECHConfig by @ckcr4lyf in https://github.com/rustls/rustls/pull/2013
• docs: word iff => if and only if by @Borber in https://github.com/rustls/rustls/pull/2015
• key_update API and automatic key refreshing by @ctz in https://github.com/rustls/rustls/pull/2003
• chore(deps): lock file maintenance by @renovate-bot in https://github.com/rustls/rustls/pull/2020
• Fix flickery unbuffered examples by @ctz in https://github.com/rustls/rustls/pull/2017
• key_update review follow-up by @ctz in https://github.com/rustls/rustls/pull/2016
• add warn for elided_lifetimes_in_paths by @cpu in https://github.com/rustls/rustls/pull/2025
• chore: fix some comments by @haouvw in https://github.com/rustls/rustls/pull/2026
• Tighten up ticketer decryption by @ctz in https://github.com/rustls/rustls/pull/2022
• examples Fix minor typo (ciper -> cipher) by @bheesham in https://github.com/rustls/rustls/pull/2027
• chore(deps): lock file maintenance by @renovate-bot in https://github.com/rustls/rustls/pull/2029
• unbuffered: add missing deref for CommonState by @ctz in https://github.com/rustls/rustls/pull/2032
• common_state: expose key exchange group by @cpu in https://github.com/rustls/rustls/pull/2028
• Add function to verify CertifiedKey consistency by @lvkv in https://github.com/rustls/rustls/pull/1954
• Avoid markdown footnotes by @ctz in https://github.com/rustls/rustls/pull/2033
• Benchmark unbuffered API by @ctz in https://github.com/rustls/rustls/pull/2024
• chore(deps): lock file maintenance by @renovate-bot in https://github.com/rustls/rustls/pull/2035
• chore(deps): lock file maintenance by @renovate-bot in https://github.com/rustls/rustls/pull/2036
• Verify CertifiedKey consistency in ConfigBuilder with_single_cert methods by @lvkv in https://github.com/rustls/rustls/pull/2034
• Implement public_key() for all built-in SigningKey impls by @ctz in https://github.com/rustls/rustls/pull/2039
• Prepare 0.23.11 by @ctz in https://github.com/rustls/rustls/pull/2037

New Contributors

• @ckcr4lyf made their first contribution in https://github.com/rustls/rustls/pull/2009
• @Borber made their first contribution in https://github.com/rustls/rustls/pull/2015
• @haouvw made their first contribution in https://github.com/rustls/rustls/pull/2026
• @bheesham made their first contribution in https://github.com/rustls/rustls/pull/2027
• @lvkv made their first contribution in https://github.com/rustls/rustls/pull/1954

Full Changelog: https://github.com/rustls/rustls/compare/v/0.23.10...v/0.23.11