Skip to content

Conversation

@Aaronontheweb
Copy link
Member

Summary

Release preparation for Akka.NET v1.5.53 - a security patch containing important fixes for TLS/SSL hostname validation and improved error diagnostics.

Changes

  • Updated version to 1.5.53 in Directory.Build.props
  • Added release notes to RELEASE_NOTES.md

Security Fixes

  • #7897 - Fix TLS hostname validation bug and add configurable validation
    • Fixes critical bug where TLS clients validated against their own certificate DNS name instead of the remote server address
    • Adds new validate-certificate-hostname configuration option (defaults to false for backward compatibility)
    • Introduces type-safe validation APIs through new TlsValidationCallbacks factory class

Improvements

  • #7891 - Improve TLS/SSL certificate error messages during handshake failures
    • Provides human-readable, actionable error messages for TLS/SSL certificate validation failures
    • Significantly improves developer experience when troubleshooting TLS issues

Release Information

This is a security patch release that continues the TLS/SSL improvements from v1.5.52.

Updated version to 1.5.53 and added release notes documenting security fixes for TLS hostname validation and improved TLS/SSL error messaging.
@Aaronontheweb Aaronontheweb enabled auto-merge (squash) October 10, 2025 01:26
@Aaronontheweb Aaronontheweb merged commit e1c4b4f into akkadotnet:v1.5 Oct 10, 2025
6 of 11 checks passed
@Aaronontheweb Aaronontheweb deleted the release/v1.5.53 branch October 10, 2025 02:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant