From dfee7bb4db4c3382012425fb8654d3cdc1f33ad9 Mon Sep 17 00:00:00 2001 From: Aaron Stannard Date: Thu, 9 Oct 2025 20:13:55 -0500 Subject: [PATCH] Prepare v1.5.53 release Updated version to 1.5.53 and added release notes documenting security fixes for TLS hostname validation and improved TLS/SSL error messaging. --- Directory.Build.props | 19 +++++++++---------- RELEASE_NOTES.md | 21 +++++++++++++++++++++ 2 files changed, 30 insertions(+), 10 deletions(-) diff --git a/Directory.Build.props b/Directory.Build.props index ff9cf6432cb..1a105674598 100644 --- a/Directory.Build.props +++ b/Directory.Build.props @@ -2,7 +2,7 @@ Copyright © 2013-$([System.DateTime]::Now.Year) Akka.NET Team Akka.NET Team - 1.5.52 + 1.5.53 akkalogo.png https://getakka.net/ Apache-2.0 @@ -50,25 +50,24 @@ true - **SECURITY PATCH** + Akka.NET v1.5.53 is a security patch containing important fixes for TLS/SSL hostname validation and improved error diagnostics for certificate authentication issues. -Akka.NET v1.5.52 is a security patch containing crucial fixes for enforcing certificate-based authentication using mTLS enforcement. Please see https://getakka.net/articles/remoting/security.html for details on how this works. +**Security Fixes:** -* [Akka.Remote: implement mutual TLS authentication support](https://github.com/akkadotnet/akka.net/pull/7851) -* [Akka.Remote: validate SSL certificate private key access at server startup](https://github.com/akkadotnet/akka.net/pull/7847) +* [Fix TLS hostname validation bug and add configurable validation](https://github.com/akkadotnet/akka.net/pull/7897) - Fixes a critical bug where TLS clients validated against their own certificate DNS name instead of the remote server address, particularly affecting mutual TLS scenarios. This release also adds a new `validate-certificate-hostname` configuration option to `akka.remote.dot-netty.tcp` (defaults to `false` for backward compatibility) and introduces type-safe validation APIs through the new `TlsValidationCallbacks` factory class. -Other fixes: +**Improvements:** -* [Akka.Cluster.Sharding: ShardedDaemonSets: randomize starting worker index](https://github.com/akkadotnet/akka.net/pull/7857) +* [Improve TLS/SSL certificate error messages during handshake failures](https://github.com/akkadotnet/akka.net/pull/7891) - Provides human-readable, actionable error messages for TLS/SSL certificate validation failures with detailed troubleshooting guidance, significantly improving the developer experience when configuring certificate-based authentication. -1 contributors since release 1.5.51 +1 contributor since release 1.5.52 | COMMITS | LOC+ | LOC- | AUTHOR | | --- | --- | --- | --- | -| 3 | 1193 | 149 | Aaron Stannard | +| 2 | 1060 | 77 | Aaron Stannard | -To [see the full set of changes in Akka.NET v1.5.52, click here](https://github.com/akkadotnet/akka.net/milestone/135?closed=1) +To [see the full set of changes in Akka.NET v1.5.53, click here](https://github.com/akkadotnet/akka.net/milestone/136?closed=1) diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 7d3e3262c27..f8e2e9ac578 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,3 +1,24 @@ +#### 1.5.53 October 9th, 2025 #### + +Akka.NET v1.5.53 is a security patch containing important fixes for TLS/SSL hostname validation and improved error diagnostics for certificate authentication issues. + +**Security Fixes:** + +* [Fix TLS hostname validation bug and add configurable validation](https://github.com/akkadotnet/akka.net/pull/7897) - Fixes a critical bug where TLS clients validated against their own certificate DNS name instead of the remote server address, particularly affecting mutual TLS scenarios. This release also adds a new `validate-certificate-hostname` configuration option to `akka.remote.dot-netty.tcp` (defaults to `false` for backward compatibility) and introduces type-safe validation APIs through the new `TlsValidationCallbacks` factory class. + +**Improvements:** + +* [Improve TLS/SSL certificate error messages during handshake failures](https://github.com/akkadotnet/akka.net/pull/7891) - Provides human-readable, actionable error messages for TLS/SSL certificate validation failures with detailed troubleshooting guidance, significantly improving the developer experience when configuring certificate-based authentication. + +1 contributor since release 1.5.52 + +| COMMITS | LOC+ | LOC- | AUTHOR | +| --- | --- | --- | --- | +| 2 | 1060 | 77 | Aaron Stannard | + + +To [see the full set of changes in Akka.NET v1.5.53, click here](https://github.com/akkadotnet/akka.net/milestone/136?closed=1) + #### 1.5.52 October 6th, 2025 #### **SECURITY PATCH**