Swift-nio-ssl: OpenSSL security update, March 22nd 2023

TL;DR: swift-nio-ssl is unaffected.

OpenSSL has published a security advisory that discloses a low severity security issue that affects BoringSSL, CVE-2023-0464. This issue only affects users of BoringSSL that enable X.509 policy checking, which is disabled by default. swift-nio-ssl has never enabled policy checking, and so is unaffected.

2 Likes