From 8c6d8c2a498146992123ef5407d7ba01a1e7224d Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Fri, 13 Dec 2013 14:41:32 +0000 Subject: Backport TLS padding extension from master. --- CHANGES | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) (limited to 'CHANGES') diff --git a/CHANGES b/CHANGES index b113221647..a3059d1b91 100644 --- a/CHANGES +++ b/CHANGES @@ -4,6 +4,25 @@ Changes between 1.0.1e and 1.0.2 [xx XXX xxxx] + *) TLS pad extension: draft-agl-tls-padding-02 + + Workaround for the "TLS hang bug" (see FAQ and PR#2771): if the + TLS client Hello record length value would otherwise be > 255 and + less that 512 pad with a dummy extension containing zeroes so it + is at least 512 bytes long. + + To enable it use an unused extension number (for example chrome uses + 35655) using: + + e.g. -DTLSEXT_TYPE_padding=35655 + + Since the extension is ignored the actual number doesn't matter as long + as it doesn't clash with any existing extension. + + This will be updated when the extension gets an official number. + + [Adam Langley, Steve Henson] + *) Extended RSA OAEP support via EVP_PKEY API. Options to specify digest, MGF1 digest and OAEP label. [Steve Henson] -- cgit v1.2.3