diff options
author | Joel Sing <joel@sing.id.au> | 2020-05-08 02:33:33 +1000 |
---|---|---|
committer | Joel Sing <joel@sing.id.au> | 2020-05-08 02:33:33 +1000 |
commit | 0e8011de3c2e4137019d4089bf20fb7192e1078c (patch) | |
tree | daaa1af01a14730579db45cdcd95f71e78478e45 /ChangeLog | |
parent | 442a969ed4f82005b343517e80e19120f1fa56db (diff) | |
download | portable-0e8011de3c2e4137019d4089bf20fb7192e1078c.tar.gz portable-0e8011de3c2e4137019d4089bf20fb7192e1078c.tar.bz2 portable-0e8011de3c2e4137019d4089bf20fb7192e1078c.zip |
Tweak ChangeLog entries.
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 20 |
1 files changed, 11 insertions, 9 deletions
@@ -30,28 +30,30 @@ LibreSSL Portable Release Notes: | |||
30 | 30 | ||
31 | 3.1.1 - Stable release | 31 | 3.1.1 - Stable release |
32 | 32 | ||
33 | * Improved SSL_CTX_set_cipher_list(3) and SSL_set_cipher_list(3) to | 33 | * Improved cipher suite handling to automatically include TLSv1.3 |
34 | include TLSv1.3 cipher suites even if cipher string does not | 34 | cipher suites when they are not explicitly referred to in the |
35 | indicate it. | 35 | cipher string. |
36 | 36 | ||
37 | * Improved to handle TLSv1.3 HelloRetryRequest. | 37 | * Improved handling of TLSv1.3 HelloRetryRequests, simplifying |
38 | state transitions and ensuring that the legacy session identifer | ||
39 | retains the same value across the handshake. | ||
38 | 40 | ||
39 | * Provided TLSv1.3 cipher suite aliases to match the names used | 41 | * Provided TLSv1.3 cipher suite aliases to match the names used |
40 | in RFC 8446. | 42 | in RFC 8446. |
41 | 43 | ||
42 | * Improved to allow using any of the groups in our NID list to | 44 | * Improved TLSv1.3 client key share handling to allow the use of |
43 | generate a client key share. | 45 | any groups in our configured NID list. |
44 | 46 | ||
45 | * Fixed printing the serialNumber with X509_print_ex() fall back to | 47 | * Fixed printing the serialNumber with X509_print_ex() fall back to |
46 | the colon separated hex bytes in case greater than int value. | 48 | the colon separated hex bytes in case greater than int value. |
47 | 49 | ||
48 | * Fixed to disallow setting the AES-GCM IV length to zero. | 50 | * Fix to disallow setting the AES-GCM IV length to zero. |
49 | 51 | ||
50 | * Added -groups option to openssl(1) s_server subcommand. | 52 | * Added -groups option to openssl(1) s_server subcommand. |
51 | 53 | ||
52 | * Fixed to show TLSv1.3 extension type with openssl(1) -tlsextdebug. | 54 | * Fix to show TLSv1.3 extension types with openssl(1) -tlsextdebug. |
53 | 55 | ||
54 | * Improved portable builds to support for use of static MSVC runtimes. | 56 | * Improved portable builds to support the use of static MSVC runtimes. |
55 | 57 | ||
56 | * Fixed portable builds to avoid exporting a sleep() symbol. | 58 | * Fixed portable builds to avoid exporting a sleep() symbol. |
57 | 59 | ||