summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorNicola Tuveri <nic.tuv@gmail.com>2022-02-22 16:26:26 +0200
committerNicola Tuveri <nic.tuv@gmail.com>2022-03-03 21:16:27 +0200
commitcabebaf8185aed5e81a274de8bb3ba472e6b794a (patch)
treee28332e224daec4142ac50400d208207088f5e67 /CHANGES
parentb6b7e6ff0970a2dbeabe5e272febf354b245986f (diff)
[ssl] Add SSL_kDHEPSK and SSL_kECDHEPSK as PFS ciphersuites for SECLEVEL >= 3
Fixes #17743 (manually cherry picked from commit b139a95665eb023b38695d62d9dfc28f3fb89972) Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/17791)
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES6
1 files changed, 5 insertions, 1 deletions
diff --git a/CHANGES b/CHANGES
index 8a33c22774..ca60f359c9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -9,7 +9,11 @@
Changes between 1.1.1m and 1.1.1n [xx XXX xxxx]
- *)
+ *) Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
+ to the list of ciphersuites providing Perfect Forward Secrecy as
+ required by SECLEVEL >= 3.
+
+ [Dmitry Belyavskiy, Nicola Tuveri]
Changes between 1.1.1l and 1.1.1m [14 Dec 2021]