diff options
author | Joel Sing <joel@sing.id.au> | 2020-08-24 03:25:28 +1000 |
---|---|---|
committer | Joel Sing <joel@sing.id.au> | 2020-08-24 03:26:52 +1000 |
commit | 7118349db91e643b1292550013994fe33fe0644a (patch) | |
tree | a4f26482ae25e61d6a1866235670687950eb06e1 /ChangeLog | |
parent | 2c49c28d47e3dd7f4a2b3c4ab75ea87f72044fe4 (diff) | |
download | portable-7118349db91e643b1292550013994fe33fe0644a.tar.gz portable-7118349db91e643b1292550013994fe33fe0644a.tar.bz2 portable-7118349db91e643b1292550013994fe33fe0644a.zip |
Tweak change log entries.
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 21 |
1 files changed, 11 insertions, 10 deletions
@@ -30,20 +30,20 @@ LibreSSL Portable Release Notes: | |||
30 | 30 | ||
31 | 3.2.1 - Development release | 31 | 3.2.1 - Development release |
32 | 32 | ||
33 | * Propagate alerts from the read half of the record layer to I/O | 33 | * Propagate alerts from the read half of the TLSv1.3 record layer to I/O |
34 | functions. | 34 | functions. |
35 | 35 | ||
36 | * Send a record overflow alert for messages having overlong plaintext | 36 | * Send a record overflow alert for TLSv1.3 messages having overlong |
37 | or inner plaintext. | 37 | plaintext or inner plaintext. |
38 | 38 | ||
39 | * Send an illegal parameter alert if a client sends invalid DH key | 39 | * Send an illegal parameter alert if a client sends an invalid DH key |
40 | shares. | 40 | share. |
41 | 41 | ||
42 | * Document PKCS7_final(3), PKCS7_add_attribute(3). | 42 | * Document PKCS7_final(3), PKCS7_add_attribute(3). |
43 | 43 | ||
44 | * Collapse x509v3 directory into x509. | 44 | * Collapse x509v3 directory into x509. |
45 | 45 | ||
46 | * Improve client certificate selection to allow EC certificates | 46 | * Improve TLSv1.3 client certificate selection to allow EC certificates |
47 | instead of only RSA certificates. | 47 | instead of only RSA certificates. |
48 | 48 | ||
49 | * Fail on receiving an invalid NID in X509_ATTRIBUTE_create() instead | 49 | * Fail on receiving an invalid NID in X509_ATTRIBUTE_create() instead |
@@ -96,7 +96,7 @@ LibreSSL Portable Release Notes: | |||
96 | * Fix SSL_shutdown behavior to match the legacy stack. The previous | 96 | * Fix SSL_shutdown behavior to match the legacy stack. The previous |
97 | behavior could cause a hang. | 97 | behavior could cause a hang. |
98 | 98 | ||
99 | * Add initial support for PowerPC64. | 99 | * Add initial support for openbsd/powerpc64. |
100 | 100 | ||
101 | * Make the message type available in the internal TLS extensions API | 101 | * Make the message type available in the internal TLS extensions API |
102 | functions. | 102 | functions. |
@@ -116,7 +116,7 @@ LibreSSL Portable Release Notes: | |||
116 | 116 | ||
117 | * Handle SSL_MODE_AUTO_RETRY being changed during a TLSv1.3 session. | 117 | * Handle SSL_MODE_AUTO_RETRY being changed during a TLSv1.3 session. |
118 | 118 | ||
119 | * Convert openssl(1) s_server to new option handling. | 119 | * Convert openssl(1) s_server option handling. |
120 | 120 | ||
121 | * Add minimal info callback support for TLSv1.3. | 121 | * Add minimal info callback support for TLSv1.3. |
122 | 122 | ||
@@ -127,12 +127,13 @@ LibreSSL Portable Release Notes: | |||
127 | * Add the P-521 curve to the list of curves supported by default | 127 | * Add the P-521 curve to the list of curves supported by default |
128 | in the client. | 128 | in the client. |
129 | 129 | ||
130 | * Convert openssl(1) req option handling | 130 | * Convert openssl(1) req option handling. |
131 | 131 | ||
132 | * Avoid calling freezero with a negative size if a server sends a | 132 | * Avoid calling freezero with a negative size if a server sends a |
133 | malformed plaintext of all zeroes. | 133 | malformed plaintext of all zeroes. |
134 | 134 | ||
135 | * Send an unexpected message alert if no valid content type is found. | 135 | * Send an unexpected message alert if no valid content type is found |
136 | in a TLSv1.3 record. | ||
136 | 137 | ||
137 | 3.2.0 - Development release | 138 | 3.2.0 - Development release |
138 | 139 | ||