diff options
author | Theo Buehler <tb@openbsd.org> | 2024-09-01 02:43:00 -0600 |
---|---|---|
committer | Theo Buehler <tb@openbsd.org> | 2024-09-01 02:43:00 -0600 |
commit | b8a6e780213ebac9fcb0ceb2c187e4a9ab82d0e3 (patch) | |
tree | 5450484c61ad7a91a40572311f4b0fe9f2957bbf | |
parent | de89d89ae35e8de059d0a7ff1768823ba7ef646c (diff) | |
download | portable-b8a6e780213ebac9fcb0ceb2c187e4a9ab82d0e3.tar.gz portable-b8a6e780213ebac9fcb0ceb2c187e4a9ab82d0e3.tar.bz2 portable-b8a6e780213ebac9fcb0ceb2c187e4a9ab82d0e3.zip |
Update ChangeLog
-rw-r--r-- | ChangeLog | 15 |
1 files changed, 13 insertions, 2 deletions
@@ -89,14 +89,25 @@ LibreSSL Portable Release Notes: | |||
89 | - Protocol parsing in libtls was changed. The unsupported TLSv1.1 | 89 | - Protocol parsing in libtls was changed. The unsupported TLSv1.1 |
90 | and TLSv1.0 protocols are ignored and no longer enable or disable | 90 | and TLSv1.0 protocols are ignored and no longer enable or disable |
91 | TLSv1.2 in surprising ways. | 91 | TLSv1.2 in surprising ways. |
92 | - The dangerous EVP_PKEY*_check(3) family of functions was removed. | ||
93 | The openssl(1) pkey and pkeyparam commands no longer support the | ||
94 | -check and -pubcheck flags. | ||
92 | - The one-step hashing functions, MD4(), MD5(), RIPEMD160(), SHA1(), | 95 | - The one-step hashing functions, MD4(), MD5(), RIPEMD160(), SHA1(), |
93 | all SHA-2, and HMAC() no longer support returning a static buffer. | 96 | all SHA-2, and HMAC() no longer support returning a static buffer. |
94 | Callers must pass in a correctly sized buffer. | 97 | Callers must pass in a correctly sized buffer. |
98 | - Support for Whirlpool was removed. Applications still using this | ||
99 | should honor OPENSSL_NO_WHIRLPOOL. | ||
95 | - Removed workaround for F5 middle boxes. | 100 | - Removed workaround for F5 middle boxes. |
96 | - Removed the useless pem2.h, a public header that was added since | 101 | - Removed the useless pem2.h, a public header that was added since |
97 | it was too hard to add a prototype to one file. | 102 | it was too hard to add a single prototype to one file. |
103 | - Removed conf_api.h and the public API therein. | ||
104 | - Numerous conf and attribute functions were removed. Some unused | ||
105 | types were removed, others were made opaque. | ||
98 | - Only specified versions can be set on certs, CRLs and CSRs. | 106 | - Only specified versions can be set on certs, CRLs and CSRs. |
99 | - Prepared X509_REQ_{get,set}_extension_nids() for removal. | 107 | - Removed the deprecated HMAC_Init() function. |
108 | - Removed OPENSSL_load_builtin_modules(). | ||
109 | - Removed X509_REQ_{get,set}_extension_nids(). | ||
110 | - X509_check_trust() and was removed, X509_VAL was made opaque. | ||
100 | - Removed unused PEM_USER and PEM_CTX types from pem.h. | 111 | - Removed unused PEM_USER and PEM_CTX types from pem.h. |
101 | - Removed typdefs for COMP_CTX, COMP_METHOD, X509_CRL_METHOD, STORE, | 112 | - Removed typdefs for COMP_CTX, COMP_METHOD, X509_CRL_METHOD, STORE, |
102 | STORE_METHOD, and SSL_AEAD_CTX. | 113 | STORE_METHOD, and SSL_AEAD_CTX. |