From 2c55a0bc93bf578757ec5c85bdb3abe9cf3f4893 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Fri, 15 May 2015 10:55:10 +0100 Subject: Add CHANGES entry for OPENSSL_NO_TLSEXT removal Reviewed-by: Rich Salz Reviewed-by: Richard Levitte --- CHANGES | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'CHANGES') diff --git a/CHANGES b/CHANGES index 397ff2c6e1..e1e0721601 100644 --- a/CHANGES +++ b/CHANGES @@ -3,6 +3,11 @@ _______________ Changes between 1.0.2 and 1.1.0 [xx XXX xxxx] + *) Given the pervasive nature of TLS extensions it is inadvisable to run + OpenSSL without support for them. It also means that maintaining + the OPENSSL_NO_TLSEXT option within the code is very invasive (and probably + not well tested). Therefore the OPENSSL_NO_TLSEXT option has been removed. + [Matt Caswell] *) Version negotiation has been rewritten. In particular SSLv23_method(), SSLv23_client_method() and SSLv23_server_method() have been deprecated, -- cgit v1.2.3