diff options
| author | Phus Lu <phus.lu@gmail.com> | 2021-10-25 18:47:00 +0800 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2022-02-03 13:45:41 +0100 |
| commit | 13a53fbf13bc6fa09c95ad4bdc6ec70fa15aa16d (patch) | |
| tree | 34c712b39eae57857d9b3b60abd7d8f59c9cdca5 /CHANGES.md | |
| parent | 27aca04e13ca8a9bead49de7bc380110ecb7064e (diff) | |
add SSL_get0_iana_groups() & SSL_client_hello_get_extension_order()
The function/macro allow user get groups/extensions without memory allcations.
So we could calculate the ssl fignerprint(ja3) in low cost.
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16910)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index 3799c28c97..212532bce2 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -24,6 +24,15 @@ OpenSSL 3.1 ### Changes between 3.0 and 3.1 [xx XXX xxxx] + * Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting. The + SSL_CTRL_GET_IANA_GROUPS control code, exposed as the SSL_get0_iana_groups() + function-like macro, retrieves the list of supported groups sent by the peer, + and the function SSL_client_hello_get_extension_order() populates a caller-supplied + array with the list of extension types present in the ClientHello, in order of + appearance. + + *Phus Lu* + * Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid() to make it possible to use empty passphrase strings. |