diff options
| author | Brent Cook <bcook@openbsd.org> | 2017-09-04 16:18:20 -0500 |
|---|---|---|
| committer | Brent Cook <bcook@openbsd.org> | 2017-09-04 16:18:20 -0500 |
| commit | 82fda3d4109139e2490d1a1d4a2a3951fb798f64 (patch) | |
| tree | 90c3fe722b8bd64a9c6901e4f7b495d6dd45a717 /ChangeLog | |
| parent | b623db7bfb350a19ad2d9ef0231f6d329cf7ab99 (diff) | |
| download | portable-82fda3d4109139e2490d1a1d4a2a3951fb798f64.tar.gz portable-82fda3d4109139e2490d1a1d4a2a3951fb798f64.tar.bz2 portable-82fda3d4109139e2490d1a1d4a2a3951fb798f64.zip | |
update changes
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 6 |
1 files changed, 3 insertions, 3 deletions
| @@ -65,7 +65,7 @@ LibreSSL Portable Release Notes: | |||
| 65 | * Removed support for the TLS padding extension, which was added as a | 65 | * Removed support for the TLS padding extension, which was added as a |
| 66 | workaround for an old bug in F5's TLS termintation. | 66 | workaround for an old bug in F5's TLS termintation. |
| 67 | 67 | ||
| 68 | * Workaround a new bug in F5's TLS termination handling the | 68 | * Worked around another bug in F5's TLS termination handling of the |
| 69 | elliptical curves extension. RFC 4492 only defines elliptic_curves | 69 | elliptical curves extension. RFC 4492 only defines elliptic_curves |
| 70 | for ClientHello. However, F5 is sending it in ServerHello. We need | 70 | for ClientHello. However, F5 is sending it in ServerHello. We need |
| 71 | to skip over it since our TLS extension parsing code is now more | 71 | to skip over it since our TLS extension parsing code is now more |
| @@ -75,9 +75,9 @@ LibreSSL Portable Release Notes: | |||
| 75 | with 32-bit time_t. This is necessary to conform to RFC 5280 | 75 | with 32-bit time_t. This is necessary to conform to RFC 5280 |
| 76 | 4.1.2.5. | 76 | 4.1.2.5. |
| 77 | 77 | ||
| 78 | * Imported SSL_CTX_set_min_proto_version(3) from OpenSSL | 78 | * Implemented the SSL_CTX_set_min_proto_version(3) API. |
| 79 | 79 | ||
| 80 | * Remove the original (pre-IETF) chacha20-poly1305 cipher suites. | 80 | * Removed the original (pre-IETF) chacha20-poly1305 cipher suites. |
| 81 | 81 | ||
| 82 | * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM. | 82 | * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM. |
| 83 | 83 | ||