diff options
| author | Matt Caswell <matt@openssl.org> | 2016-11-02 22:23:16 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2016-11-02 23:25:48 +0000 |
| commit | 717f4026d593119cf493b3c1e045462c540f4cb3 (patch) | |
| tree | 846943bb3366dbe0ce46d508b76ef5c1f5f8bdec /CHANGES | |
| parent | e4815a0bd2bcb00abea63f651284100028e3436c (diff) | |
Add a CHANGES entry for the unrecognised record type change
Reviewed-by: Tim Hudson <tjh@openssl.org>
(cherry picked from commit ce95f3b724f71f42dd57af4a0a8e2f571deaf94d)
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 6 |
1 files changed, 5 insertions, 1 deletions
@@ -4,7 +4,11 @@ Changes between 1.1.0b and 1.1.0c [xx XXX xxxx] - *) + *) OpenSSL now fails if it receives an unrecognised record type in TLS1.0 + or TLS1.1. Previously this only happened in SSLv3 and TLS1.2. This is to + prevent issues where no progress is being made and the peer continually + sends unrecognised record types, using up resources processing them. + [Matt Caswell] *) Removed automatic addition of RPATH in shared libraries and executables, as this was a remainder from OpenSSL 1.0.x and isn't needed any more. |