Copy DH key (if available) in addition to the bare parameters

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 91f4e56a6072e8ee2ac9a087dfd0d8285cae95d8..ae01a2c90f4dd9fd2afeec1539d63bea4c374a6c 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,21 @@
 
  Changes between 0.9.5 and 0.9.5a  [XX XXX 2000]
 
+  *) For SSL_[CTX_]set_tmp_dh, don't create a DH key if SSL_OP_SINGLE_DH_USE
+     is set; it will be thrown away anyway because each handshake creates
+     its own key.
+     ssl_cert_dup, which is used by SSL_new, now copies DH keys in addition
+     to parameters -- in previous versions (since OpenSSL 0.9.3) the
+     'default key' from SSL_CTX_set_tmp_dh would always be lost, meanining
+     you effectivly got SSL_OP_SINGLE_DH_USE when using this macro.
+     [Bodo Moeller]
+
+  *) New s_client option -ign_eof: EOF at stdin is ignored, and
+     'Q' and 'R' lose their special meanings (quit/renegotiate).
+     This is part of what -quiet does; unlike -quiet, -ign_eof
+     does not suppress any output.
+     [Richard Levitte]
+
   *) Add compatibility options to the purpose and trust code. The
      purpose X509_PURPOSE_ANY is "any purpose" which automatically
      accepts a certificate or CA, this was the previous behaviour,