factotum/libressl-portable
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update changes

Browse Source
This commit is contained in:
Brent Cook 2017-09-04 16:18:20 -05:00
parent b623db7bfb
commit 82fda3d410
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@ -65,7 +65,7 @@ LibreSSL Portable Release Notes:
* Removed support for the TLS padding extension, which was added as a * Removed support for the TLS padding extension, which was added as a
workaround for an old bug in F5's TLS termintation. workaround for an old bug in F5's TLS termintation.
* Workaround a new bug in F5's TLS termination handling the * Worked around another bug in F5's TLS termination handling of the
elliptical curves extension. RFC 4492 only defines elliptic_curves elliptical curves extension. RFC 4492 only defines elliptic_curves
for ClientHello. However, F5 is sending it in ServerHello. We need for ClientHello. However, F5 is sending it in ServerHello. We need
to skip over it since our TLS extension parsing code is now more to skip over it since our TLS extension parsing code is now more
@ -75,9 +75,9 @@ LibreSSL Portable Release Notes:
with 32-bit time_t. This is necessary to conform to RFC 5280 with 32-bit time_t. This is necessary to conform to RFC 5280
4.1.2.5. 4.1.2.5.
* Imported SSL_CTX_set_min_proto_version(3) from OpenSSL * Implemented the SSL_CTX_set_min_proto_version(3) API.
* Remove the original (pre-IETF) chacha20-poly1305 cipher suites. * Removed the original (pre-IETF) chacha20-poly1305 cipher suites.
* Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM. * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.