Skip to content

fix(ingress): retain classical TLS group fallbacks - #120

Merged
h4x3rotab merged 1 commit into
mainfrom
fix/ingress-classical-fallback-groups
Sep 3, 2026
Merged

fix(ingress): retain classical TLS group fallbacks#120
h4x3rotab merged 1 commit into
mainfrom
fix/ingress-classical-fallback-groups

Conversation

@h4x3rotab

Copy link
Copy Markdown
Contributor

Summary

  • retain X25519, P-256, and P-384 fallback groups alongside X25519MLKEM768
  • verify each configured group with a local TLS 1.3 handshake

Verification

  • ./build-image.sh
  • bash scripts/tests/test_x25519mlkem768.sh dstack-ingress-fallback-test:local
  • bash scripts/tests/test_sanitizers.sh
  • python3 scripts/tests/test_certman.py
  • python3 scripts/tests/test_dnsguide.py
  • python3 scripts/tests/test_deterministic_key.py

@h4x3rotab
h4x3rotab merged commit 6ad29b4 into main Sep 3, 2026
6 checks passed
@h4x3rotab
h4x3rotab deleted the fix/ingress-classical-fallback-groups branch September 4, 2026 04:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant