diff options
| author | Joel Sing <joel@sing.id.au> | 2020-05-08 02:33:33 +1000 |
|---|---|---|
| committer | Joel Sing <joel@sing.id.au> | 2020-05-08 02:33:33 +1000 |
| commit | 0e8011de3c2e4137019d4089bf20fb7192e1078c (patch) | |
| tree | daaa1af01a14730579db45cdcd95f71e78478e45 /ChangeLog | |
| parent | 442a969ed4f82005b343517e80e19120f1fa56db (diff) | |
| download | portable-0e8011de3c2e4137019d4089bf20fb7192e1078c.tar.gz portable-0e8011de3c2e4137019d4089bf20fb7192e1078c.tar.bz2 portable-0e8011de3c2e4137019d4089bf20fb7192e1078c.zip | |
Tweak ChangeLog entries.
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 20 |
1 files changed, 11 insertions, 9 deletions
| @@ -30,28 +30,30 @@ LibreSSL Portable Release Notes: | |||
| 30 | 30 | ||
| 31 | 3.1.1 - Stable release | 31 | 3.1.1 - Stable release |
| 32 | 32 | ||
| 33 | * Improved SSL_CTX_set_cipher_list(3) and SSL_set_cipher_list(3) to | 33 | * Improved cipher suite handling to automatically include TLSv1.3 |
| 34 | include TLSv1.3 cipher suites even if cipher string does not | 34 | cipher suites when they are not explicitly referred to in the |
| 35 | indicate it. | 35 | cipher string. |
| 36 | 36 | ||
| 37 | * Improved to handle TLSv1.3 HelloRetryRequest. | 37 | * Improved handling of TLSv1.3 HelloRetryRequests, simplifying |
| 38 | state transitions and ensuring that the legacy session identifer | ||
| 39 | retains the same value across the handshake. | ||
| 38 | 40 | ||
| 39 | * Provided TLSv1.3 cipher suite aliases to match the names used | 41 | * Provided TLSv1.3 cipher suite aliases to match the names used |
| 40 | in RFC 8446. | 42 | in RFC 8446. |
| 41 | 43 | ||
| 42 | * Improved to allow using any of the groups in our NID list to | 44 | * Improved TLSv1.3 client key share handling to allow the use of |
| 43 | generate a client key share. | 45 | any groups in our configured NID list. |
| 44 | 46 | ||
| 45 | * Fixed printing the serialNumber with X509_print_ex() fall back to | 47 | * Fixed printing the serialNumber with X509_print_ex() fall back to |
| 46 | the colon separated hex bytes in case greater than int value. | 48 | the colon separated hex bytes in case greater than int value. |
| 47 | 49 | ||
| 48 | * Fixed to disallow setting the AES-GCM IV length to zero. | 50 | * Fix to disallow setting the AES-GCM IV length to zero. |
| 49 | 51 | ||
| 50 | * Added -groups option to openssl(1) s_server subcommand. | 52 | * Added -groups option to openssl(1) s_server subcommand. |
| 51 | 53 | ||
| 52 | * Fixed to show TLSv1.3 extension type with openssl(1) -tlsextdebug. | 54 | * Fix to show TLSv1.3 extension types with openssl(1) -tlsextdebug. |
| 53 | 55 | ||
| 54 | * Improved portable builds to support for use of static MSVC runtimes. | 56 | * Improved portable builds to support the use of static MSVC runtimes. |
| 55 | 57 | ||
| 56 | * Fixed portable builds to avoid exporting a sleep() symbol. | 58 | * Fixed portable builds to avoid exporting a sleep() symbol. |
| 57 | 59 | ||