diff options
author | Theo Buehler <tb@openbsd.org> | 2024-08-02 23:59:10 -0600 |
---|---|---|
committer | Theo Buehler <tb@openbsd.org> | 2024-08-02 23:59:10 -0600 |
commit | 695bdfc4b63939241be6d81116e1f4a567f9a0e7 (patch) | |
tree | 988cd991971c5490747082e3164f93ae200454fb | |
parent | 58f8cd7909c9e78c4a1707e237ccd145aa7c27f2 (diff) | |
download | portable-695bdfc4b63939241be6d81116e1f4a567f9a0e7.tar.gz portable-695bdfc4b63939241be6d81116e1f4a567f9a0e7.tar.bz2 portable-695bdfc4b63939241be6d81116e1f4a567f9a0e7.zip |
update ChangeLog
-rw-r--r-- | ChangeLog | 7 |
1 files changed, 4 insertions, 3 deletions
@@ -79,9 +79,9 @@ LibreSSL Portable Release Notes: | |||
79 | * Testing and proactive security | 79 | * Testing and proactive security |
80 | - Switched the remaining tests to new certs. | 80 | - Switched the remaining tests to new certs. |
81 | * Compatibility changes | 81 | * Compatibility changes |
82 | - Protocol parsing in libtls was changed. The no longer supported | 82 | - Protocol parsing in libtls was changed. The unsupported TLSv1.1 |
83 | TLSv1.1 and TLSv1.0 protocols are completely ignored and no longer | 83 | and TLSv1.0 protocols are ignored and no longer enable or disable |
84 | enable or disable TLSv1.2 in surprising ways. | 84 | TLSv1.2 in surprising ways. |
85 | - The one-step hashing functions, MD4(), MD5(), RIPEMD160(), SHA1(), | 85 | - The one-step hashing functions, MD4(), MD5(), RIPEMD160(), SHA1(), |
86 | all SHA-2, and HMAC() no longer support returning a static buffer. | 86 | all SHA-2, and HMAC() no longer support returning a static buffer. |
87 | Callers must pass in a correctly sized buffer. | 87 | Callers must pass in a correctly sized buffer. |
@@ -98,6 +98,7 @@ LibreSSL Portable Release Notes: | |||
98 | - Added TLS1-PRF support to the EVP interface. | 98 | - Added TLS1-PRF support to the EVP interface. |
99 | - Removed ssl2.h and ssl23.h. | 99 | - Removed ssl2.h and ssl23.h. |
100 | - Support for attributes in EVP_PKEYs was removed. | 100 | - Support for attributes in EVP_PKEYs was removed. |
101 | - Added SSL_CTX_set1_cert_store() | ||
101 | * Bug fixes | 102 | * Bug fixes |
102 | - Made ASN1_TIME_set_string() and ASN1_TIME_set_string_X509() match | 103 | - Made ASN1_TIME_set_string() and ASN1_TIME_set_string_X509() match |
103 | their documentation. They always set an RFC 5280 conformant time. | 104 | their documentation. They always set an RFC 5280 conformant time. |