Changes

This release refines TLS behaviour to enhance security and begins consolidating TLS configuration on SslOptions. The introduction of hostname verification by default significantly improves the safety of TLS connections. For further details, see #4497.

🔧 Change in Behaviour

• The legacy ssl(true) TLS path now enables hostname verification by default (#4497). It now rejects certificates whose SAN/CN does not match the target host, making TLS connections safer. The SslOptions-based configuration remains unchanged.
• Deprecate legacy SSL configuration in favor of SslOptions (#4497).

Contributors

@ggivo

Full Changelog: v7.4.1...v7.5.0