summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorBodo Moeller <bodo@openssl.org>2014-10-15 04:05:42 +0200
committerBodo Moeller <bodo@openssl.org>2014-10-15 04:05:42 +0200
commit6bfe55380abbf7528e04e59f18921bd6c896af1c (patch)
tree1398d8e3eba72f8d5e50bd0eef8ec030422a15c0 /CHANGES
parent4e05aedbcab7f7f83a887e952ebdcc5d4f2291e4 (diff)
Support TLS_FALLBACK_SCSV.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES6
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 79477f6c26..c79f4d0058 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,12 @@
Changes between 1.0.1i and 1.0.1j [xx XXX xxxx]
+ *) Add support for TLS_FALLBACK_SCSV.
+ Client applications doing fallback retries should call
+ SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
+ (CVE-2014-3566)
+ [Adam Langley, Bodo Moeller]
+
*) Add additional DigestInfo checks.
Reencode DigestInto in DER and check against the original when