diff options
| author | Brent Cook <busterb@gmail.com> | 2021-02-06 19:33:36 -0600 |
|---|---|---|
| committer | Brent Cook <busterb@gmail.com> | 2021-02-06 19:33:36 -0600 |
| commit | 55514b97d3f1487e297de00909b936bc7b5a10ab (patch) | |
| tree | 0930f2d08bdae37a5d1b3f71e699ce0d0e5a9cb9 | |
| parent | 99e74b5b2ef13732dc86987c44c4151b66f25c3a (diff) | |
| download | portable-55514b97d3f1487e297de00909b936bc7b5a10ab.tar.gz portable-55514b97d3f1487e297de00909b936bc7b5a10ab.tar.bz2 portable-55514b97d3f1487e297de00909b936bc7b5a10ab.zip | |
Add Changelog for 3.2.4
| -rw-r--r-- | ChangeLog | 22 |
1 files changed, 22 insertions, 0 deletions
| @@ -28,6 +28,28 @@ history is also available from Git. | |||
| 28 | 28 | ||
| 29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
| 30 | 30 | ||
| 31 | 3.2.4 - Bug and interoperability fixes | ||
| 32 | |||
| 33 | * Switch back to certificate verification code from LibreSSL 3.1.x. The | ||
| 34 | new verifier is not bug compatible with the old verifier causing issues | ||
| 35 | expecting behavior of the old verifier. | ||
| 36 | |||
| 37 | * Unbreak DTLS retransmissions for flights that include a CCS | ||
| 38 | |||
| 39 | * Only check BIO_should_read() on read and BIO_should_write() on write | ||
| 40 | |||
| 41 | * Implement autochain for the TLSv1.3 server | ||
| 42 | |||
| 43 | * Use the legacy verifier for AUTO_CHAIN | ||
| 44 | |||
| 45 | * Implement exporter for TLSv1.3 | ||
| 46 | |||
| 47 | * Free alert_data and phh_data in tls13_record_layer_free() | ||
| 48 | |||
| 49 | * Plug leak in x509_verify_chain_dup() | ||
| 50 | |||
| 51 | * Free the policy tree in x509_vfy_check_policy() | ||
| 52 | |||
| 31 | 3.2.3 - Security fix | 53 | 3.2.3 - Security fix |
| 32 | 54 | ||
| 33 | * Malformed ASN.1 in a certificate revocation list or a timestamp | 55 | * Malformed ASN.1 in a certificate revocation list or a timestamp |
