diff options
author | Bodo Möller <bodo@openssl.org> | 2008-09-22 21:22:47 +0000 |
---|---|---|
committer | Bodo Möller <bodo@openssl.org> | 2008-09-22 21:22:47 +0000 |
commit | 837f2fc7a4a8073b269538b7d0168c0cd7edd951 (patch) | |
tree | 348ce3ea77cb8c787c99fa7a6e35e100d6b29d9d /CHANGES | |
parent | 1a489c9af1b0481ad9570968c5fecd56854580db (diff) |
Make sure that SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG can't
enable disabled ciphersuites.
Diffstat (limited to 'CHANGES')
-rw-r--r-- | CHANGES | 11 |
1 files changed, 10 insertions, 1 deletions
@@ -2,7 +2,7 @@ OpenSSL CHANGES _______________ - Changes between 0.9.8i and 0.9.9 [xx XXX xxxx] + Changes between 0.9.8j and 0.9.9 [xx XXX xxxx] *) Delta CRL support. New use deltas option which will attempt to locate and search any appropriate delta CRLs available. @@ -703,6 +703,15 @@ *) Change 'Configure' script to enable Camellia by default. [NTT] + Changes between 0.9.8i and 0.9.8j [xx XXX xxxx] + + *) Change the server-side SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG behavior + to ensure that even with this option, only ciphersuites in the + server's preference list will be accepted. (Note that the option + applies only when resuming a session, so the earlier behavior was + just about the algorithm choice for symmetric cryptography.) + [Bodo Moeller] + Changes between 0.9.8h and 0.9.8i [15 Sep 2008] *) Fix a state transitition in s3_srvr.c and d1_srvr.c |