diff options
| author | Matt Caswell <matt@openssl.org> | 2021-04-07 19:36:45 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2021-04-12 11:32:05 +0100 |
| commit | 6878f4300213cfd7d4f01e26a8b97f70344da100 (patch) | |
| tree | 029af3058e0bead17df24a1e0bbc36ec4a914a53 /CHANGES.md | |
| parent | a3a54179b6754fbed6d88e434baac710a83aaf80 (diff) | |
Update KTLS documentation
KTLS support has been changed to be off by default, and configuration is
via a single "option" rather two "modes". Documentation is updated
accordingly.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14799)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index 581fda0c96..c85d106765 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -23,6 +23,12 @@ OpenSSL 3.0 ### Changes between 1.1.1 and 3.0 [xx XXX xxxx] + * Added support for Kernel TLS (KTLS). In order to use KTLS, support for it + must be compiled in using the "enable-ktls" compile time option. It must + also be enabled at run time using the SSL_OP_ENABLE_KTLS option. + + *Boris Pismenny, John Baldwin and Andrew Gallatin* + * A public key check is now performed during EVP_PKEY_derive_set_peer(). Previously DH was internally doing this during EVP_PKEY_derive(). To disable this check use EVP_PKEY_derive_set_peer_ex(dh, peer, 0). This |