X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=CHANGES;h=e0622f6be5cd464e752f23ffbe6be42600657630;hp=81bd07e5601cd93a9fbd2b7a18176d7856077d59;hb=988788f697768524f1856d22abb8db340be646d5;hpb=924acc5451028abd3218be96cce346596fb3ad6d

diff --git a/CHANGES b/CHANGES
index 81bd07e560..e0622f6be5 100644
--- a/CHANGES
+++ b/CHANGES
@@ -5,6 +5,12 @@
 
  Changes between 0.9.1c and 0.9.2
 
+  *) Permit null encryption ciphersuites, used for authentication only. It used
+     to be necessary to set the preprocessor define SSL_ALLOW_ENULL to do this.
+     It is now necessary to set SSL_FORBID_ENULL to prevent the use of null
+     encryption.
+     [Ben Laurie]
+
   *) Add a bunch of fixes to the PKCS#7 stuff. It used to sometimes reorder
      signed attributes when verifying signatures (this would break them), 
      the detached data encoding was wrong and public keys obtained using