factotum/libressl-portable
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

More minor ChangeLog tweaks for 3.3.2

Browse Source
This commit is contained in:
Theo Buehler 2021-04-15 08:17:10 +02:00
parent c1b88faef3
commit 5fdde5723d
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ChangeLog
View File

@ -130,7 +130,7 @@ LibreSSL Portable Release Notes:
* Remove direct assignment of aead_ctx to avoid a leak. * Remove direct assignment of aead_ctx to avoid a leak.
* Added a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360, * Add a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360,
draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds. draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds.
* Fail early in legacy exporter if the master secret is not available * Fail early in legacy exporter if the master secret is not available
@ -226,8 +226,8 @@ LibreSSL Portable Release Notes:
* Fix checks for memory caps of constraints names. There are internal * Fix checks for memory caps of constraints names. There are internal
caps on the number of name constraints and other names, that the new caps on the number of name constraints and other names, that the new
name constraints code allocates per cert chain. These checks were name constraints code allocates per cert chain. These limits were
checked too late, making these limits only partially effective. checked too late, making them only partially effective.
* Use EXFLAG_INVALID to handle out of memory and parse errors in * Use EXFLAG_INVALID to handle out of memory and parse errors in
x509v3_cache_extensions(). x509v3_cache_extensions().
@ -245,7 +245,7 @@ LibreSSL Portable Release Notes:
checking for EXFLAG_INVALID. This broke OCSP validation with checking for EXFLAG_INVALID. This broke OCSP validation with
certain mirrors. certain mirrors.
* Made supported protocols and options for DHE params more prominent * Make supported protocols and options for DHE params more prominent
in tls_config_set_protocols.3. in tls_config_set_protocols.3.
* Avoid a use-after-scope in tls13_cert_add(). * Avoid a use-after-scope in tls13_cert_add().
@ -262,7 +262,7 @@ LibreSSL Portable Release Notes:
does not set errno. does not set errno.
* Convert openssl(1) x509 to new option handling and do the usual * Convert openssl(1) x509 to new option handling and do the usual
clean up that goeas along with it. clean up that goes along with it.
* Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data. * Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data.