The #1718 modified how static files are handled to prevent directory traversal. On that PR, some unit test were added to echo_test.go, but those test were not implemented for the Static Middleware (static_test.go)
The idea of this issue is to implement the missing test on the Static Middleware in relation to TestEchoStatic tests.

The app_get0_propq (from apps/lib/apps.c) is used throughout many openssl apps to define propq used to fetch the algorithms. Currently, it just returns NULL and its comment says "TODO(3.0): Make this an environment variable if required".
If a provider is used that does not implement all algorithms (e.g. reuses STORE from the default one) the propq needs to be defined to fetch the right implemen

Context and Description

The READMEs and any example code in all projects should be updated to reflect the move from the IBM-Swift organization to the Kitura organization.

If anyone wants to take on all or part of this, please comment here so other's know what you're working on and submit PR's. :-)

Thanks!

There's little information about what keys and values are in the output, what it means and how they are related to the screen output. In general that needs to be added. (special topics see #1675, #1674)

Problem:

A common pattern is:

GUARD(s2n_stuffer_skip_write(stuffer, bytes_to_write));
uint8_t* ptr = suffer->blob.data + stuffer->write_cursor - bytes_to_write;

which could be simplified.

Solution:

*ptr could be an *out parameter to s2n_stuffer_skip_write

• Does this change what S2N sends over the wire? No.
• Does this change any public APIs? No.

Expose high level metrics for Prometheus to scrape & generate potential alerts.

Expected Behavior

Host a /metrics endpoint on its own port (not the same one as the /oauth2/* default proxy). This will allow easier configurations so the metrics aren't exposed publicly.

Not sure what good metrics would be to collect -- other reverse proxies would be good to look at for motivation.

We should review the codebase & docs for alienating language, along the lines of https://www.eetimes.com/its-time-for-ieee-to-retire-master-slave/ . There's some Arm-internal discussion here: https://confluence.arm.com/display/DIVINC/Arm+Progressive+Terminology+Group

Description

• Type: Enhancement

"master" occurs commonly in "pre-master secret" which probably should remain while it's t