summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorBodo Moeller <bodo@openssl.org>2014-10-15 04:04:55 +0200
committerBodo Moeller <bodo@openssl.org>2014-10-15 04:04:55 +0200
commita46c705214004358c8e7b1b5c3eb1c45615d3b21 (patch)
tree7af6623db9e229b55dedf2c7f7d809891e64664f /CHANGES
parentdc7bca8bccbfe31d28a2be5e0ae8f220de8b5109 (diff)
Support TLS_FALLBACK_SCSV.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES6
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index dc2a81afe7..a54081402f 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,12 @@
Changes between 1.0.1i and 1.0.2 [xx XXX xxxx]
+ *) Add support for TLS_FALLBACK_SCSV.
+ Client applications doing fallback retries should call
+ SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
+ (CVE-2014-3566)
+ [Adam Langley, Bodo Moeller]
+
*) Accelerated NIST P-256 elliptic curve implementation for x86_64
(other platforms pending).
[Shay Gueron (Intel Corp), Andy Polyakov]