diff options
author | Pauli <ppzgs1@gmail.com> | 2021-02-08 13:09:49 +1000 |
---|---|---|
committer | Pauli <ppzgs1@gmail.com> | 2021-02-12 12:28:55 +1000 |
commit | 7dd5a00f410206974d4ee134bb0ca05bf0f42061 (patch) | |
tree | 3446c16217f5d8c3b1ab605a3def8a1a31a26547 /CHANGES.md | |
parent | b5873b31761e68015f4943ab137fc5e63323342e (diff) |
changes: add a CHANGES.md entry for the OSSL_FORCE_NO_CACHE_FETCH option.
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14126)
Diffstat (limited to 'CHANGES.md')
-rw-r--r-- | CHANGES.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index 380cd07886..b846746204 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -23,6 +23,12 @@ OpenSSL 3.0 ### Changes between 1.1.1 and 3.0 [xx XXX xxxx] + * Add a compile time option to prevent the caching of provider fetched + algorithms. This is enabled by including the no-cached-fetch option + at configuration time. + + *Paul Dale* + * Combining the Configure options no-ec and no-dh no longer disables TLSv1.3. Typically if OpenSSL has no EC or DH algorithms then it cannot support connections with TLSv1.3. However OpenSSL now supports "pluggable" groups |