diff options
author | Brent Cook <bcook@openbsd.org> | 2017-09-04 16:18:20 -0500 |
---|---|---|
committer | Brent Cook <bcook@openbsd.org> | 2017-09-04 16:18:20 -0500 |
commit | 82fda3d4109139e2490d1a1d4a2a3951fb798f64 (patch) | |
tree | 90c3fe722b8bd64a9c6901e4f7b495d6dd45a717 /ChangeLog | |
parent | b623db7bfb350a19ad2d9ef0231f6d329cf7ab99 (diff) | |
download | portable-82fda3d4109139e2490d1a1d4a2a3951fb798f64.tar.gz portable-82fda3d4109139e2490d1a1d4a2a3951fb798f64.tar.bz2 portable-82fda3d4109139e2490d1a1d4a2a3951fb798f64.zip |
update changes
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -65,7 +65,7 @@ LibreSSL Portable Release Notes: | |||
65 | * Removed support for the TLS padding extension, which was added as a | 65 | * Removed support for the TLS padding extension, which was added as a |
66 | workaround for an old bug in F5's TLS termintation. | 66 | workaround for an old bug in F5's TLS termintation. |
67 | 67 | ||
68 | * Workaround a new bug in F5's TLS termination handling the | 68 | * Worked around another bug in F5's TLS termination handling of the |
69 | elliptical curves extension. RFC 4492 only defines elliptic_curves | 69 | elliptical curves extension. RFC 4492 only defines elliptic_curves |
70 | for ClientHello. However, F5 is sending it in ServerHello. We need | 70 | for ClientHello. However, F5 is sending it in ServerHello. We need |
71 | to skip over it since our TLS extension parsing code is now more | 71 | to skip over it since our TLS extension parsing code is now more |
@@ -75,9 +75,9 @@ LibreSSL Portable Release Notes: | |||
75 | with 32-bit time_t. This is necessary to conform to RFC 5280 | 75 | with 32-bit time_t. This is necessary to conform to RFC 5280 |
76 | 4.1.2.5. | 76 | 4.1.2.5. |
77 | 77 | ||
78 | * Imported SSL_CTX_set_min_proto_version(3) from OpenSSL | 78 | * Implemented the SSL_CTX_set_min_proto_version(3) API. |
79 | 79 | ||
80 | * Remove the original (pre-IETF) chacha20-poly1305 cipher suites. | 80 | * Removed the original (pre-IETF) chacha20-poly1305 cipher suites. |
81 | 81 | ||
82 | * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM. | 82 | * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM. |
83 | 83 | ||