Delete NULL ciphers from 'ALL' in the cipher list aliases. This means that

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 277b54083429d232cf973821f1f0257917c629b7..a1217540f2f10ffbee635e753722bb4ac6c5bead 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -5,6 +5,12 @@
 
  Changes between 0.9.1c and 0.9.2
 
+  *) Change the meaning of 'ALL' in the cipher list. It now means "everything
+     except NULL ciphers". This means the default cipher list will no longer
+     enable NULL ciphers. They need to be specifically enabled e.g. with
+     the string "DEFAULT:eNULL".
+     [Steve Henson]
+
   *) Fix to RSA private encryption routines: if p < q then it would
      occasionally produce an invalid result. This will only happen with
      externally generated keys because OpenSSL (and SSLeay) ensure p > q.