h2o/picotls

View on GitHub

TLS 1.3 implementation in C (master supports RFC8446 as well as draft-26, -27, -28)

Stars: 640
Forks: 173
Open beginner issues: 0
Indexed issues: 55
Avg merge: 22h 14m
Merged PRs (30d): 3

Dominant language: C
License: No license data
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 17, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Open All

55 open issues indexed

No resumption following HRR Open

wontfix

h2o/picotls#23 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
provide API to track resumed sessions Open

h2o/picotls#28 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
How to run the cli server with minicrypto for key exchange? Open

h2o/picotls#86 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 17, 2026
picotls and curl Open

h2o/picotls#145 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
ed25519 Open

h2o/picotls#146 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
key fingerprint Open

h2o/picotls#164 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
certificate verify verification for minicrypto and secp256r1 Open

h2o/picotls#173 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Building on macOS Open

h2o/picotls#188 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Don't send session tickets when client authentication is being used Open

h2o/picotls#191 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
t/util.h uses undocumented and non-standard ns_* APIs Open

h2o/picotls#217 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Segmentation fault (core dumped) on Server Run with ESNI Open

h2o/picotls#245 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Handle ESNI retry Open

h2o/picotls#249 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
recalculate ESNI extension when responding to HRR Open

h2o/picotls#251 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
How to free certs loaded by ptls_load_certificates? Open

h2o/picotls#260 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
add draft-ietf-tls-esni-04 support Open

h2o/picotls#267 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Is picotls compatible with intel QAT and OpenSSL's Engine module and its ASYNC_JOB? Open

h2o/picotls#278 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
add config to limit the maximum handshake message size Open

h2o/picotls#281 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
dtrace support for FreeBSD Open

h2o/picotls#282 · 1 comment · 2 reactions · 0 assignees · Indexed Sep 17, 2026
async public key operations Open

h2o/picotls#297 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Please support Mingw-w64 on Windows Open

h2o/picotls#299 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
AES-NI and PCLMULQDQ support Open

h2o/picotls#312 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Installing picotls? Open

h2o/picotls#317 · 1 comment · 2 reactions · 0 assignees · Indexed Sep 17, 2026
Inline function ptls_aead__do_encrypt makes invalid assumptions on encrypted length Open

h2o/picotls#326 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support 96 bit "sequence" in aead_init Open

h2o/picotls#329 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
CI is not checking compatibility with MacOs clang Open

h2o/picotls#333 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Trying to understand ptls_buffer_push_block and ptls_buffer_push Open

h2o/picotls#338 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Please add a "LICENSE" file Open

h2o/picotls#339 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add Windows to CI matrix Open

h2o/picotls#350 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Why does the client hello change? Open

h2o/picotls#351 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Knowing handshake state Open

h2o/picotls#359 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support for Apple M1 in Fusion Open

h2o/picotls#379 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Valgrind complains about ptls_fusion_is_supported_by_cpu Open

h2o/picotls#380 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
error: unrecognized command line option ‘-mvaes’; did you mean ‘-maes’? Open

h2o/picotls#421 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Conditional jump or move depends on uninitialised value(s) Open

h2o/picotls#450 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
in ptls_import / ptls_export, take care of partial TLS record being received Open

h2o/picotls#477 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
no error handling of key_schedule_new failure Open

h2o/picotls#488 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
We should document ECH, update the ESNI wiki page. Open

h2o/picotls#496 · 7 comments · 2 reactions · 0 assignees · Indexed Sep 17, 2026
Perhaps require appropriate C standard? Pre-C11 compiler fails: `picotls.c: error: ‘ptls_handshake_properties_t’ has no member named ‘client’` Open

h2o/picotls#505 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Possible integer overflow when checking obfuscated ticket age Open

h2o/picotls#509 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Ticket issued time does not compensate for RTT Open

h2o/picotls#510 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
OpenSSL RSA private key default format changes to PKCS#8 Open

h2o/picotls#511 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Build error with Clang on 10.6–10.7: `error: call to undeclared library function 'aligned_alloc' with type 'void *(unsigned long, unsigned long)'; ISO C99 and later do not support implicit function declarations` Open

h2o/picotls#514 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Build error: `picotls.c: error: too many arguments to function 'subtest'` Open

h2o/picotls#518 · 10 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
when cli act as server with client authentication, it sends NewSessionTicket directly after Finished Open

h2o/picotls#522 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Should exclude PSK_DHE mode when key_share is null Open

h2o/picotls#531 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
External PSK auth may fail with missing_extension (109) Open

h2o/picotls#534 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Build of the current master fails: `error: implicit declaration of function 'mbedtls_pk_load_file'; did you mean 'mbedtls_mpi_read_file'? [-Wimplicit-function-declaration]` Open

h2o/picotls#537 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Feature request: multiple external PSKs Open

h2o/picotls#541 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
tests fail on Mac Open

h2o/picotls#544 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Improve oss-integration Open

h2o/picotls#549 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026

h2o/picotls

Get new issues in your inbox