diff options
| author | Theo Buehler <tb@openbsd.org> | 2021-04-15 08:17:10 +0200 |
|---|---|---|
| committer | Theo Buehler <tb@openbsd.org> | 2021-04-15 08:17:50 +0200 |
| commit | 5fdde5723de17d54d660f4244fb0480743d69688 (patch) | |
| tree | af88a39c9213e3fc7b3d99611accf011d9208f98 /ChangeLog | |
| parent | c1b88faef3e803d1e23a5c802386045bb41d273e (diff) | |
| download | portable-5fdde5723de17d54d660f4244fb0480743d69688.tar.gz portable-5fdde5723de17d54d660f4244fb0480743d69688.tar.bz2 portable-5fdde5723de17d54d660f4244fb0480743d69688.zip | |
More minor ChangeLog tweaks for 3.3.2
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 10 |
1 files changed, 5 insertions, 5 deletions
| @@ -130,7 +130,7 @@ LibreSSL Portable Release Notes: | |||
| 130 | 130 | ||
| 131 | * Remove direct assignment of aead_ctx to avoid a leak. | 131 | * Remove direct assignment of aead_ctx to avoid a leak. |
| 132 | 132 | ||
| 133 | * Added a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360, | 133 | * Add a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360, |
| 134 | draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds. | 134 | draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds. |
| 135 | 135 | ||
| 136 | * Fail early in legacy exporter if the master secret is not available | 136 | * Fail early in legacy exporter if the master secret is not available |
| @@ -226,8 +226,8 @@ LibreSSL Portable Release Notes: | |||
| 226 | 226 | ||
| 227 | * Fix checks for memory caps of constraints names. There are internal | 227 | * Fix checks for memory caps of constraints names. There are internal |
| 228 | caps on the number of name constraints and other names, that the new | 228 | caps on the number of name constraints and other names, that the new |
| 229 | name constraints code allocates per cert chain. These checks were | 229 | name constraints code allocates per cert chain. These limits were |
| 230 | checked too late, making these limits only partially effective. | 230 | checked too late, making them only partially effective. |
| 231 | 231 | ||
| 232 | * Use EXFLAG_INVALID to handle out of memory and parse errors in | 232 | * Use EXFLAG_INVALID to handle out of memory and parse errors in |
| 233 | x509v3_cache_extensions(). | 233 | x509v3_cache_extensions(). |
| @@ -245,7 +245,7 @@ LibreSSL Portable Release Notes: | |||
| 245 | checking for EXFLAG_INVALID. This broke OCSP validation with | 245 | checking for EXFLAG_INVALID. This broke OCSP validation with |
| 246 | certain mirrors. | 246 | certain mirrors. |
| 247 | 247 | ||
| 248 | * Made supported protocols and options for DHE params more prominent | 248 | * Make supported protocols and options for DHE params more prominent |
| 249 | in tls_config_set_protocols.3. | 249 | in tls_config_set_protocols.3. |
| 250 | 250 | ||
| 251 | * Avoid a use-after-scope in tls13_cert_add(). | 251 | * Avoid a use-after-scope in tls13_cert_add(). |
| @@ -262,7 +262,7 @@ LibreSSL Portable Release Notes: | |||
| 262 | does not set errno. | 262 | does not set errno. |
| 263 | 263 | ||
| 264 | * Convert openssl(1) x509 to new option handling and do the usual | 264 | * Convert openssl(1) x509 to new option handling and do the usual |
| 265 | clean up that goeas along with it. | 265 | clean up that goes along with it. |
| 266 | 266 | ||
| 267 | * Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data. | 267 | * Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data. |
| 268 | 268 | ||
