Allow client certificate lists > 16kB ("Douglas E. Engert" <deengert@anl.gov>.)

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index aef5034c8088cc29ce9dbe9e1feac2aba16a4aee..4d560e66ddf901121dbb30dc02c64cdaa83f5a10 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -12,6 +12,12 @@
          *) applies to 0.9.6a/0.9.6b/0.9.6c and 0.9.7
          +) applies to 0.9.7 only
 
+  *) s3_srvr.c: allow sending of large client certificate lists (> 16 kB).
+     This function was broken, as the check for a new client hello message
+     to handle SGC did not allow these large messages.
+     (Tracked down by "Douglas E. Engert" <deengert@anl.gov>.)
+     [Lutz Jaenicke]
+
   *) Add alert descriptions for TLSv1 to SSL_alert_desc_string[_long]().
      [Lutz Jaenicke]