factotum/libressl-portable
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Zap many things that are promised for later

Browse Source 
We can mention the new OpenSSL compat API and the validator API
when they're enabled.

The commit message for the validator is out of place.
This commit is contained in:
Theo Buehler 2020-10-07 21:54:19 +02:00
parent 817c145e3d
commit 98beb2b633
1 changed files with 2 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
ChangeLog
View File

@ -34,29 +34,12 @@ LibreSSL Portable Release Notes:
enabled for both server and client. The OpenSSL TLSv1.3 API is not
yet available and will be provided in an upcoming release.
* This release also adds a new X509 certificate chain validator
The new validator finds multiple validated chains to handle the
modern PKI cases which may frequently have multiple paths via
different intermediates to different roots. It is loosely based on
golang's X509 validator.
This includes integration so that the new validator can be used via
X509_verify_cert() as well as a new API x509_verify() which will
return multiple chains (similar to go).
The new public API is not yet exposed, and will be finalized and
enabled later.
* New X509 certificate chain validator loosely based on Go's X509
validator.
* Improve the handling of BIO_read()/BIO_write() failures in the
TLSv1.3 stack.
* Prepare to provide most of the TLSv1.3-related OpenSSL 1.1.1 API.
This will be finished in an upcoming release.
* Implement SSL_{CTX_,}set_ciphersuites() and add regress. This is not
yet public API and will be enabled in a future release.
* Start replacing the existing TLSv1.2 record layer.
* Define OPENSSL_NO_SSL_TRACE in opensslfeatures.h.
@ -112,9 +95,6 @@ LibreSSL Portable Release Notes:
* Document return value from EC_KEY_get0_public_key(3).
* Add initial manual page for the x509_verify() chain validator which
will be installed once the new API is publically exposed.
* Greatly expanded test coverage by the tlsfuzzer test scripts.
* Test the Botan TLS client with LibreSSL, OpenSSL 1.0.2 and 1.1.1