diff options
| author | Tim Perry <pimterry@gmail.com> | 2024-04-16 15:40:21 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2024-04-22 13:23:28 +0100 |
| commit | 972ee925b16fc3bc7ec71080c439e669754235ab (patch) | |
| tree | 69a9654ce675a2d8e5903f979842488086cd3556 /CHANGES.md | |
| parent | 6ee369cd6ec751c03879da56178e75e2691e08cb (diff) | |
Use empty renegotiate extension instead of SCSV for TLS > 1.0
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24161)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index 76801ac78c..aaa47976a2 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -41,6 +41,12 @@ OpenSSL 3.4 * Tomas Mraz* + * Use an empty renegotiate extension in TLS client hellos instead of + the empty renegotiation SCSV, for all connections with a minimum TLS + version > 1.0. + + *Tim Perry* + OpenSSL 3.3 ----------- |