summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2013-09-08 15:07:44 +0100
committerDr. Stephen Henson <steve@openssl.org>2013-09-08 15:10:46 +0100
commita6e7d1c0e3dbe3b1269814844594d47be9006de1 (patch)
treefa8d5f75943fddeb8d9e3a0b74d27b0cc8f64420 /CHANGES
parent5e3ff62c345c976cd1ffbcc5e6042f55264977f5 (diff)
Document extension clash.
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES9
1 files changed, 7 insertions, 2 deletions
diff --git a/CHANGES b/CHANGES
index 715da13318..734c3752bf 100644
--- a/CHANGES
+++ b/CHANGES
@@ -8,14 +8,19 @@
Experimental support for encrypt then mac from
draft-gutmann-tls-encrypt-then-mac-02.txt
-
+
To enable it set the appropriate extension number (0x10 for the test
server) using e.g. -DTLSEXT_TYPE_encrypt_then_mac=0x10
-
+
For non-compliant peers (i.e. just about everything) this should have no
effect.
WARNING: EXPERIMENTAL, SUBJECT TO CHANGE.
+
+ NOTE: unfortunately the test server value (0x10) clashes with the draft
+ ALPN extension. Until this is resolved the only way to check against the
+ test server is to temporarily change the ALPN extension value (ugh!).
+
[Steve Henson]
*) Add callbacks supporting generation and retrieval of supplemental