diff options
author | Theo Buehler <tb@openbsd.org> | 2021-04-15 08:17:10 +0200 |
---|---|---|
committer | Theo Buehler <tb@openbsd.org> | 2021-04-15 08:17:50 +0200 |
commit | 5fdde5723de17d54d660f4244fb0480743d69688 (patch) | |
tree | af88a39c9213e3fc7b3d99611accf011d9208f98 | |
parent | c1b88faef3e803d1e23a5c802386045bb41d273e (diff) | |
download | portable-5fdde5723de17d54d660f4244fb0480743d69688.tar.gz portable-5fdde5723de17d54d660f4244fb0480743d69688.tar.bz2 portable-5fdde5723de17d54d660f4244fb0480743d69688.zip |
More minor ChangeLog tweaks for 3.3.2
-rw-r--r-- | ChangeLog | 10 |
1 files changed, 5 insertions, 5 deletions
@@ -130,7 +130,7 @@ LibreSSL Portable Release Notes: | |||
130 | 130 | ||
131 | * Remove direct assignment of aead_ctx to avoid a leak. | 131 | * Remove direct assignment of aead_ctx to avoid a leak. |
132 | 132 | ||
133 | * Added a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360, | 133 | * Add a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360, |
134 | draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds. | 134 | draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds. |
135 | 135 | ||
136 | * Fail early in legacy exporter if the master secret is not available | 136 | * Fail early in legacy exporter if the master secret is not available |
@@ -226,8 +226,8 @@ LibreSSL Portable Release Notes: | |||
226 | 226 | ||
227 | * Fix checks for memory caps of constraints names. There are internal | 227 | * Fix checks for memory caps of constraints names. There are internal |
228 | caps on the number of name constraints and other names, that the new | 228 | caps on the number of name constraints and other names, that the new |
229 | name constraints code allocates per cert chain. These checks were | 229 | name constraints code allocates per cert chain. These limits were |
230 | checked too late, making these limits only partially effective. | 230 | checked too late, making them only partially effective. |
231 | 231 | ||
232 | * Use EXFLAG_INVALID to handle out of memory and parse errors in | 232 | * Use EXFLAG_INVALID to handle out of memory and parse errors in |
233 | x509v3_cache_extensions(). | 233 | x509v3_cache_extensions(). |
@@ -245,7 +245,7 @@ LibreSSL Portable Release Notes: | |||
245 | checking for EXFLAG_INVALID. This broke OCSP validation with | 245 | checking for EXFLAG_INVALID. This broke OCSP validation with |
246 | certain mirrors. | 246 | certain mirrors. |
247 | 247 | ||
248 | * Made supported protocols and options for DHE params more prominent | 248 | * Make supported protocols and options for DHE params more prominent |
249 | in tls_config_set_protocols.3. | 249 | in tls_config_set_protocols.3. |
250 | 250 | ||
251 | * Avoid a use-after-scope in tls13_cert_add(). | 251 | * Avoid a use-after-scope in tls13_cert_add(). |
@@ -262,7 +262,7 @@ LibreSSL Portable Release Notes: | |||
262 | does not set errno. | 262 | does not set errno. |
263 | 263 | ||
264 | * Convert openssl(1) x509 to new option handling and do the usual | 264 | * Convert openssl(1) x509 to new option handling and do the usual |
265 | clean up that goeas along with it. | 265 | clean up that goes along with it. |
266 | 266 | ||
267 | * Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data. | 267 | * Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data. |
268 | 268 | ||