diff options
author | Brent Cook <bcook@openbsd.org> | 2015-08-02 23:42:48 -0500 |
---|---|---|
committer | Brent Cook <bcook@openbsd.org> | 2015-08-02 23:42:48 -0500 |
commit | a6d5b322762107cb4892dd66c83a427e99a13929 (patch) | |
tree | b73712a81d59b429ed1619b5629f17057fdc8166 | |
parent | 6527c320394ffa025b1faad79ce38e782a3c104b (diff) | |
download | portable-a6d5b322762107cb4892dd66c83a427e99a13929.tar.gz portable-a6d5b322762107cb4892dd66c83a427e99a13929.tar.bz2 portable-a6d5b322762107cb4892dd66c83a427e99a13929.zip |
update release notes for 2.2.2
-rw-r--r-- | ChangeLog | 47 |
1 files changed, 45 insertions, 2 deletions
@@ -28,8 +28,51 @@ history is also available from Git. | |||
28 | 28 | ||
29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
30 | 30 | ||
31 | This release primarily addresses a number of security issues in coordination | 31 | 2.2.2 - More TLS parser rework, bug fixes, expanded portable build support |
32 | with the OpenSSL project. | 32 | |
33 | * Switched 'openssl dhparam' default from 512 to 2048 bits | ||
34 | |||
35 | * Reworked openssl(1) option handling | ||
36 | |||
37 | * More CRYPTO ByteString (CBC) packet parsing conversions | ||
38 | |||
39 | * Fixed 'openssl pkeyutl -verify' to exit with a 0 on success | ||
40 | |||
41 | * Fixed dozens of Coverity issues including dead code, memory leaks, | ||
42 | logic errors and more. | ||
43 | |||
44 | * Ensure that openssl(1) restores terminal echo state after reading a | ||
45 | password. | ||
46 | |||
47 | * Incorporated fix for OpenSSL Issue #3683 | ||
48 | |||
49 | * LibreSSL version define LIBRESSL_VERSION_NUMBER will now be bumped | ||
50 | for each portable release. | ||
51 | |||
52 | * Removed workarounds for TLS client padding bugs. | ||
53 | |||
54 | * No longer disable ECDHE-ECDSA on OS X | ||
55 | |||
56 | * Removed SSLv3 support from openssl(1) | ||
57 | |||
58 | * Removed IE 6 SSLv3 workarounds. | ||
59 | |||
60 | * Modifie tls_write in libtls to allow partial writes, clarified with | ||
61 | examples in the documentation. | ||
62 | |||
63 | * Removed RSAX engine | ||
64 | |||
65 | * Tested SSLv3 removal with the OpenBSD ports tree and found several | ||
66 | applications that were not ready to build without SSLv3 yet. For | ||
67 | now, building a program that intentionally uses SSLv3 will result in | ||
68 | a linker warning. | ||
69 | |||
70 | * Added TLS_method, TLS_client_method and TLS_server_method as a | ||
71 | replacement for the SSLv23_*method calls. | ||
72 | |||
73 | * Added initial cmake build support, including support for building with | ||
74 | Visual Studio, currently tested with Visual Studio 2013 Community | ||
75 | Edition. | ||
33 | 76 | ||
34 | 2.2.1 - Build fixes, feature added, features removed | 77 | 2.2.1 - Build fixes, feature added, features removed |
35 | 78 | ||