factotum/libressl-portable
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

condense and refine changelog a bit

Browse Source
This commit is contained in:
Brent Cook 2017-03-25 21:25:58 -05:00
parent 19cf5c9b01
commit 22bda9840b
1 changed files with 9 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
ChangeLog
View File

@ -30,39 +30,30 @@ LibreSSL Portable Release Notes:
2.5.2 - Security features and bugfixes 2.5.2 - Security features and bugfixes
* Improved portability of ocspcheck(1) * Added the recallocarray(3) memory allocation function, and converted
various places in the library to use it, such as CBB and BUF_MEM_grow.
recallocarray(3) is similar to reallocarray. Newly allocated memory
is cleared similar to calloc(3). Memory that becomes unallocated
while shrinking or moving existing allocations is explicitly
discarded by unmapping or clearing to 0
* Fixed assorted memory leaks and error handling. * Added new root CAs from SECOM Trust Systems / Security Communication
of Japan.
* Removed STREEBOG 512 MAC * Added EVP interface for MD5+SHA1 hashes.
* Addednew root CAs from SECOM Trust Systems / Security Communication
of Japan
* Added EVP interface for MD5+SHA1 hashes
* Fixed DTLS client failures when the server sends a certificate * Fixed DTLS client failures when the server sends a certificate
request. request.
* Many new regression tests
* Correct handling of padding when upgrading an SSLv2 challenge into * Correct handling of padding when upgrading an SSLv2 challenge into
an SSLv3/TLS connection. an SSLv3/TLS connection.
* Added recallocarray(1) memory allocation function, converted various
places in the library to use it, such as CBB and BUF_MEM_grow.
This function ensures that when a private memory buffer is resized,
freed memory is explicitly cleared before being returned to the
heap.
* Allow protocols and ciphers to be set on a TLS config object in * Allow protocols and ciphers to be set on a TLS config object in
libtls. libtls.
* Improved nc(1) TLS handshake CPU usage and server-side error * Improved nc(1) TLS handshake CPU usage and server-side error
reporting. reporting.
* Removed handshake digest code and replaced with handshake hash.
2.5.1 - Bug and security fixes, new features, documentation updates 2.5.1 - Bug and security fixes, new features, documentation updates
* X509_cmp_time() now passes a malformed GeneralizedTime field as an * X509_cmp_time() now passes a malformed GeneralizedTime field as an