Breaking changes

• The native part of one-nio now links and works only with OpenSSL 3 (tested on OpenSSL versions 3.0 and 3.2). The OpenSSL library file must have name libssl.so.3.
• Switched from GLIBC 2.2.5 to GLIBC 2.38

Major changes

• Added support for Kernel TLS, including sendfile()
• Added support for TLS early data (TLS 1.3 0-RTT)
• Added ability to export encryption keys (SSL keylog)
• Added support for SSL certificate compression (RFC8879, man)
• Added ability to use an external cache for SSL sessions
• Added ability to constrain selectors used by an acceptor (one.nio.server.ServerConfig#pinAcceptors)
• Added ability to use a single acceptor thread for all sockets (one.nio.server.ServerConfig#multiAcceptor)
• Added support for server-sent events in one.nio.http.HttpClient (spec)
• Also various fixes and optimizations

Big thanks to:

• @Blooof
• @ltalal
• @sergiusz-n
  and other current and former colleagues.