diff options
author | Brent Cook <busterb@gmail.com> | 2021-02-06 19:33:36 -0600 |
---|---|---|
committer | Brent Cook <busterb@gmail.com> | 2021-02-06 19:33:36 -0600 |
commit | 55514b97d3f1487e297de00909b936bc7b5a10ab (patch) | |
tree | 0930f2d08bdae37a5d1b3f71e699ce0d0e5a9cb9 | |
parent | 99e74b5b2ef13732dc86987c44c4151b66f25c3a (diff) | |
download | portable-55514b97d3f1487e297de00909b936bc7b5a10ab.tar.gz portable-55514b97d3f1487e297de00909b936bc7b5a10ab.tar.bz2 portable-55514b97d3f1487e297de00909b936bc7b5a10ab.zip |
Add Changelog for 3.2.4
-rw-r--r-- | ChangeLog | 22 |
1 files changed, 22 insertions, 0 deletions
@@ -28,6 +28,28 @@ history is also available from Git. | |||
28 | 28 | ||
29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
30 | 30 | ||
31 | 3.2.4 - Bug and interoperability fixes | ||
32 | |||
33 | * Switch back to certificate verification code from LibreSSL 3.1.x. The | ||
34 | new verifier is not bug compatible with the old verifier causing issues | ||
35 | expecting behavior of the old verifier. | ||
36 | |||
37 | * Unbreak DTLS retransmissions for flights that include a CCS | ||
38 | |||
39 | * Only check BIO_should_read() on read and BIO_should_write() on write | ||
40 | |||
41 | * Implement autochain for the TLSv1.3 server | ||
42 | |||
43 | * Use the legacy verifier for AUTO_CHAIN | ||
44 | |||
45 | * Implement exporter for TLSv1.3 | ||
46 | |||
47 | * Free alert_data and phh_data in tls13_record_layer_free() | ||
48 | |||
49 | * Plug leak in x509_verify_chain_dup() | ||
50 | |||
51 | * Free the policy tree in x509_vfy_check_policy() | ||
52 | |||
31 | 3.2.3 - Security fix | 53 | 3.2.3 - Security fix |
32 | 54 | ||
33 | * Malformed ASN.1 in a certificate revocation list or a timestamp | 55 | * Malformed ASN.1 in a certificate revocation list or a timestamp |