aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTheo Buehler <tb@openbsd.org>2021-04-15 08:17:10 +0200
committerTheo Buehler <tb@openbsd.org>2021-04-15 08:17:50 +0200
commit5fdde5723de17d54d660f4244fb0480743d69688 (patch)
treeaf88a39c9213e3fc7b3d99611accf011d9208f98
parentc1b88faef3e803d1e23a5c802386045bb41d273e (diff)
downloadportable-5fdde5723de17d54d660f4244fb0480743d69688.tar.gz
portable-5fdde5723de17d54d660f4244fb0480743d69688.tar.bz2
portable-5fdde5723de17d54d660f4244fb0480743d69688.zip
More minor ChangeLog tweaks for 3.3.2
-rw-r--r--ChangeLog10
1 files changed, 5 insertions, 5 deletions
diff --git a/ChangeLog b/ChangeLog
index 233d773..5d7bcb4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -130,7 +130,7 @@ LibreSSL Portable Release Notes:
130 130
131 * Remove direct assignment of aead_ctx to avoid a leak. 131 * Remove direct assignment of aead_ctx to avoid a leak.
132 132
133 * Added a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360, 133 * Add a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360,
134 draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds. 134 draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds.
135 135
136 * Fail early in legacy exporter if the master secret is not available 136 * Fail early in legacy exporter if the master secret is not available
@@ -226,8 +226,8 @@ LibreSSL Portable Release Notes:
226 226
227 * Fix checks for memory caps of constraints names. There are internal 227 * Fix checks for memory caps of constraints names. There are internal
228 caps on the number of name constraints and other names, that the new 228 caps on the number of name constraints and other names, that the new
229 name constraints code allocates per cert chain. These checks were 229 name constraints code allocates per cert chain. These limits were
230 checked too late, making these limits only partially effective. 230 checked too late, making them only partially effective.
231 231
232 * Use EXFLAG_INVALID to handle out of memory and parse errors in 232 * Use EXFLAG_INVALID to handle out of memory and parse errors in
233 x509v3_cache_extensions(). 233 x509v3_cache_extensions().
@@ -245,7 +245,7 @@ LibreSSL Portable Release Notes:
245 checking for EXFLAG_INVALID. This broke OCSP validation with 245 checking for EXFLAG_INVALID. This broke OCSP validation with
246 certain mirrors. 246 certain mirrors.
247 247
248 * Made supported protocols and options for DHE params more prominent 248 * Make supported protocols and options for DHE params more prominent
249 in tls_config_set_protocols.3. 249 in tls_config_set_protocols.3.
250 250
251 * Avoid a use-after-scope in tls13_cert_add(). 251 * Avoid a use-after-scope in tls13_cert_add().
@@ -262,7 +262,7 @@ LibreSSL Portable Release Notes:
262 does not set errno. 262 does not set errno.
263 263
264 * Convert openssl(1) x509 to new option handling and do the usual 264 * Convert openssl(1) x509 to new option handling and do the usual
265 clean up that goeas along with it. 265 clean up that goes along with it.
266 266
267 * Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data. 267 * Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data.
268 268