0.17.0

CHANGES:

• tls-async: remove ocaml < 5.0.0 constraint (#471 #474 @hannesm)
• remove dependency on ppx, especially ppx_cstruct and ppx_sexp_conv across
  the libraries (#473 @hannesm, discussion in #472)

0.16.0

CHANGES:

• BREAKING: new opam package tls-lwt (formerly tls.lwt), in dune:
  (libraries tls.lwt) should now be libraries (tls-lwt)
  (#468 @hannesm, reported #449 by @mbacarella)
• tls: update to mirage-crypto 0.11 API (#468 @hannesm)
• tls: relax SignatureAlgorithms extension handling to allow OpenSSL
  interoperability tests with TLS 1.0 and TLS 1.1 (#469 @hannesm)
• tls: remove Utils.filter_map and and Utils.option, use Stdlib instead (#455
  @hannesm)
• tls: do not globally open Utils (#455 @hannesm)
• tls: export log source of Tracing module (#461 @bikallem)
• tls: remove unused ciphersuites to reduce binary size (#467 @hannesm)
• tls-lwt: do not catch out of memory exception (#469 @hannesm)
• tls-eio: add fuzz testing using crowbar (#456 #463 @talex5)
• tls-eio: update to eio 0.7 (#456 @talex5)
• tls-eio: fix test for develop with vendoring (#462 @bikallem)

0.15.5

CHANGES:

• tls-eio release only: fix end-of-file handling (#454 @talex5), avoid
  deprecation warnings (#454 @hannesm)

0.15.4

CHANGES:

• New package tls-eio (#451 @talex5)
• Tls_async: expose tls_handler (#448 @mbacarella, reviewed by @torinnd)

0.15.3

CHANGES:

• Upgrade to v0.15 of Jane Street packages (#444 @bcc32)
• Use cmdliner 1.1.0 in lwt/examples (#445 @hannesm)

0.15.2

CHANGES:

• Drop dependency on async_find (#442 @torinnd)

0.15.1

CHANGES:

• Tls_lwt: avoid exception if connect is executed with a non-host name string
  (e.g. an IP address) (#441 @hannesm)
• Bugfix: log a warning if certificate decoding fails (#441 @hannesm)
• Remove rresult dependency (#441 @hannesm)

0.15.0

CHANGES:

• Adapt to x509 0.15.0 changes (#440 @hannesm)

0.14.1

CHANGES:

• Bugfix: do not filter signature_algorithms based on server certificate. Since
  signature_algorithms is also used for client authentication (as
  SignatureAlgorithms extension in CertificateVerify), previously the client
  needed the same key type as the server.
  Discovered in robur-coop/albatross@df434da

0.14.0

CHANGES:

• Breaking: peer_name (in config and epoch data, also own_name) is now a
  [`host] Domain_name.t instead of a string. (#434 #438 @torinnd @hannesm)
• Add a X509_async module (#435 @torinnd)
• Client and server constructor log messages are on the debug level (#436
  reported by @talex5, fix by @hannesm)
• Adapt to cstruct 6.0.0 API (Cstruct.len is deprecated) #439 @hannesm