diff options
author | Brent Cook <bcook@openbsd.org> | 2018-03-21 06:03:13 -0500 |
---|---|---|
committer | Brent Cook <bcook@openbsd.org> | 2018-03-21 06:03:13 -0500 |
commit | 83e352466e250c10a64609e73a12e5c136a983d4 (patch) | |
tree | c67f3a116915a8750d018fe369e1477e01c039d4 | |
parent | 0f7e193c80be72e0bd2a5aa6d84b0fe5da4a8aa9 (diff) | |
download | portable-83e352466e250c10a64609e73a12e5c136a983d4.tar.gz portable-83e352466e250c10a64609e73a12e5c136a983d4.tar.bz2 portable-83e352466e250c10a64609e73a12e5c136a983d4.zip |
update changelog
-rw-r--r-- | ChangeLog | 37 |
1 files changed, 34 insertions, 3 deletions
@@ -30,15 +30,46 @@ LibreSSL Portable Release Notes: | |||
30 | 30 | ||
31 | 2.7.0 - Bug fixes and improvements | 31 | 2.7.0 - Bug fixes and improvements |
32 | 32 | ||
33 | * Merged more DTLS support into the regular TLS code path, removing | 33 | * Added support for many new OpenSSL 1.0.2 and 1.1 APIs, based on an |
34 | duplicated code. | 34 | observations of real-world usage among applications. These are |
35 | implemented in parallel with existing OpenSSL 1.0.1 APIs for | ||
36 | backward compatibility. | ||
37 | |||
38 | * Extensive corrections, improvements, and additions to the | ||
39 | API documentation, including new public APIs from OpenSSL that had | ||
40 | no pre-existing documentation. | ||
35 | 41 | ||
36 | * Converted ssl3_send_client_hello(), ssl3_send_server_hello() to CBB. | 42 | * Added support for automatic library initialization in libcrypto, |
43 | libssl, and libtls. Support for pthread_once or a compatible | ||
44 | equivalent is now required of the target operating system. As a | ||
45 | side-effect, minimum Windows support is Vista or higher. | ||
46 | |||
47 | * Converted more packet handling methods to CBB, which improves | ||
48 | resiliency when processing malformed input data. | ||
49 | |||
50 | * Rewrote TLS extension handling, improving consistency of | ||
51 | checks for malformed or duplicate extensions. | ||
37 | 52 | ||
38 | * Rewrite ASN1_TYPE_{get,set}_octetstring() using templated ASN.1. | 53 | * Rewrite ASN1_TYPE_{get,set}_octetstring() using templated ASN.1. |
39 | This removes the last remaining use of the old M_ASN1_* macros | 54 | This removes the last remaining use of the old M_ASN1_* macros |
40 | (asn1_mac.h) from API that needs to continue to exist. | 55 | (asn1_mac.h) from API that needs to continue to exist. |
41 | 56 | ||
57 | * Added support for client-side session resumption in libtls. | ||
58 | A libtls client can specify a session file descriptor (a regular | ||
59 | file with appropriate ownership and permissions) and libtls will | ||
60 | manage reading and writing of session data across TLS handshakes. | ||
61 | |||
62 | * Improved support for strict alignment on ARMv7 architectures, | ||
63 | conditionally enabling assembly in those cases. | ||
64 | |||
65 | * Fixed a memory leak in libtls when reusing a tls_config. | ||
66 | |||
67 | * Merged more DTLS support into the regular TLS code path, removing | ||
68 | duplicated code. | ||
69 | |||
70 | * Many improvements to Windows Cmake-based builds and tests, | ||
71 | especially when targeting Visual Studio. | ||
72 | |||
42 | 2.6.4 - Bug fixes | 73 | 2.6.4 - Bug fixes |
43 | 74 | ||
44 | * Make tls_config_parse_protocols() work correctly when passed a NULL | 75 | * Make tls_config_parse_protocols() work correctly when passed a NULL |