summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorMatt Caswell <matt@openssl.org>2016-11-02 22:23:16 +0000
committerMatt Caswell <matt@openssl.org>2016-11-02 23:22:48 +0000
commitce95f3b724f71f42dd57af4a0a8e2f571deaf94d (patch)
tree9546a5bdd9174069c4e6f15496b28cdd4ff25a1f /CHANGES
parent1f3e70a450364e3152973380ea4d3bb6694f3980 (diff)
Add a CHANGES entry for the unrecognised record type change
Reviewed-by: Tim Hudson <tjh@openssl.org>
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES6
1 files changed, 5 insertions, 1 deletions
diff --git a/CHANGES b/CHANGES
index dfff36f761..ba661db638 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,7 +4,11 @@
Changes between 1.1.0a and 1.1.1 [xx XXX xxxx]
- *)
+ *) OpenSSL now fails if it receives an unrecognised record type in TLS1.0
+ or TLS1.1. Previously this only happened in SSLv3 and TLS1.2. This is to
+ prevent issues where no progress is being made and the peer continually
+ sends unrecognised record types, using up resources processing them.
+ [Matt Caswell]
*) 'openssl passwd' can now produce SHA256 and SHA512 based output,
using the algorithm defined in