factotum/libressl-portable
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

wordsmith some, and include mention of name constraints and bettertle test suite

Browse Source
This commit is contained in:
Bob Beck 2020-10-08 08:46:52 -06:00
parent b39be4f23e
commit a8bc7358c2
1 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
ChangeLog
View File

@ -30,12 +30,17 @@ LibreSSL Portable Release Notes:
3.2.2 - Stable release 3.2.2 - Stable release
* This is the first stable release with the new TLSv1.3 implementation * This is the first stable release with the new TLSv1.3
enabled for both server and client. The OpenSSL TLSv1.3 API is not implementation enabled by default for both server and client. The
yet available and will be provided in an upcoming release. OpenSSL 1.1 TLSv1.3 API is not yet available and will be provided
in an upcoming release.
* New X509 certificate chain validator loosely based on Go's X509 * New X509 certificate chain validator that correctly handles
validator. multiple paths through intermediate certificates. Loosely based on
Go's X509 validator.
* New name constraints verification implementation which passes the
bettertls.com certificate validation check suite.
* Improve the handling of BIO_read()/BIO_write() failures in the * Improve the handling of BIO_read()/BIO_write() failures in the
TLSv1.3 stack. TLSv1.3 stack.
@ -94,6 +99,8 @@ LibreSSL Portable Release Notes:
* Greatly expanded test coverage via the tlsfuzzer test scripts. * Greatly expanded test coverage via the tlsfuzzer test scripts.
* Expanded test coverage via the bettertls certificate test suite.
* Test interoperability with the Botan TLS client. * Test interoperability with the Botan TLS client.
* Make pthread_mutex static initialisation work on Windows. * Make pthread_mutex static initialisation work on Windows.