summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorRob Stradling <rob@comodo.com>2013-09-12 22:12:21 +0100
committerBen Laurie <ben@links.org>2013-09-13 18:15:56 +0100
commit785da0e6107460d05e2ed627613ddc851ac43ff6 (patch)
treec0ff4e1809ba999e44c54cee9763b0b1646edb3e /CHANGES
parentcbf81235122917265e18a86f07a7af2d15e3d525 (diff)
Update CHANGES.
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES8
1 files changed, 8 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 734c3752bf..d292bd53ee 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,14 @@
Changes between 1.0.x and 1.1.0 [xx XXX xxxx]
+ *) Add option SSL_OP_SAFARI_ECDHE_ECDSA_BUG (part of SSL_OP_ALL) which
+ avoids preferring ECDHE-ECDSA ciphers when the client appears to be
+ Safari on OS X. Safari on OS X 10.8..10.8.3 advertises support for
+ several ECDHE-ECDSA ciphers, but fails to negotiate them. The bug
+ is fixed in OS X 10.8.4, but Apple have ruled out both hot fixing
+ 10.8..10.8.3 and forcing users to upgrade to 10.8.4 or newer.
+ [Rob Stradling, Adam Langley]
+
*) Experimental encrypt-then-mac support.
Experimental support for encrypt then mac from