diff options
| author | Brent Cook <bcook@openbsd.org> | 2018-03-21 06:03:13 -0500 |
|---|---|---|
| committer | Brent Cook <bcook@openbsd.org> | 2018-03-21 06:03:13 -0500 |
| commit | 83e352466e250c10a64609e73a12e5c136a983d4 (patch) | |
| tree | c67f3a116915a8750d018fe369e1477e01c039d4 | |
| parent | 0f7e193c80be72e0bd2a5aa6d84b0fe5da4a8aa9 (diff) | |
| download | portable-83e352466e250c10a64609e73a12e5c136a983d4.tar.gz portable-83e352466e250c10a64609e73a12e5c136a983d4.tar.bz2 portable-83e352466e250c10a64609e73a12e5c136a983d4.zip | |
update changelog
| -rw-r--r-- | ChangeLog | 37 |
1 files changed, 34 insertions, 3 deletions
| @@ -30,15 +30,46 @@ LibreSSL Portable Release Notes: | |||
| 30 | 30 | ||
| 31 | 2.7.0 - Bug fixes and improvements | 31 | 2.7.0 - Bug fixes and improvements |
| 32 | 32 | ||
| 33 | * Merged more DTLS support into the regular TLS code path, removing | 33 | * Added support for many new OpenSSL 1.0.2 and 1.1 APIs, based on an |
| 34 | duplicated code. | 34 | observations of real-world usage among applications. These are |
| 35 | implemented in parallel with existing OpenSSL 1.0.1 APIs for | ||
| 36 | backward compatibility. | ||
| 37 | |||
| 38 | * Extensive corrections, improvements, and additions to the | ||
| 39 | API documentation, including new public APIs from OpenSSL that had | ||
| 40 | no pre-existing documentation. | ||
| 35 | 41 | ||
| 36 | * Converted ssl3_send_client_hello(), ssl3_send_server_hello() to CBB. | 42 | * Added support for automatic library initialization in libcrypto, |
| 43 | libssl, and libtls. Support for pthread_once or a compatible | ||
| 44 | equivalent is now required of the target operating system. As a | ||
| 45 | side-effect, minimum Windows support is Vista or higher. | ||
| 46 | |||
| 47 | * Converted more packet handling methods to CBB, which improves | ||
| 48 | resiliency when processing malformed input data. | ||
| 49 | |||
| 50 | * Rewrote TLS extension handling, improving consistency of | ||
| 51 | checks for malformed or duplicate extensions. | ||
| 37 | 52 | ||
| 38 | * Rewrite ASN1_TYPE_{get,set}_octetstring() using templated ASN.1. | 53 | * Rewrite ASN1_TYPE_{get,set}_octetstring() using templated ASN.1. |
| 39 | This removes the last remaining use of the old M_ASN1_* macros | 54 | This removes the last remaining use of the old M_ASN1_* macros |
| 40 | (asn1_mac.h) from API that needs to continue to exist. | 55 | (asn1_mac.h) from API that needs to continue to exist. |
| 41 | 56 | ||
| 57 | * Added support for client-side session resumption in libtls. | ||
| 58 | A libtls client can specify a session file descriptor (a regular | ||
| 59 | file with appropriate ownership and permissions) and libtls will | ||
| 60 | manage reading and writing of session data across TLS handshakes. | ||
| 61 | |||
| 62 | * Improved support for strict alignment on ARMv7 architectures, | ||
| 63 | conditionally enabling assembly in those cases. | ||
| 64 | |||
| 65 | * Fixed a memory leak in libtls when reusing a tls_config. | ||
| 66 | |||
| 67 | * Merged more DTLS support into the regular TLS code path, removing | ||
| 68 | duplicated code. | ||
| 69 | |||
| 70 | * Many improvements to Windows Cmake-based builds and tests, | ||
| 71 | especially when targeting Visual Studio. | ||
| 72 | |||
| 42 | 2.6.4 - Bug fixes | 73 | 2.6.4 - Bug fixes |
| 43 | 74 | ||
| 44 | * Make tls_config_parse_protocols() work correctly when passed a NULL | 75 | * Make tls_config_parse_protocols() work correctly when passed a NULL |
