We need to read one more byte of the REQUEST-CERTIFICATE message.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 09509abd4bfc31d664d65025daf5544f610ae0b1..cf1bc8d785c282e5c24ad961bd10ea2bcda5943a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2082,6 +2082,10 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
 
  Changes between 0.9.6g and 0.9.6h  [xx XXX xxxx]
 
+  *) Fix client_certificate (ssl/s2_clnt.c): The permissible total
+     length of the REQUEST-CERTIFICATE message is 18 .. 34, not 17 .. 33.
+     [Zeev Lieber <zeev-l@yahoo.com>]
+
   *) Change the default configuration reader to deal with last line not
      being properly terminated.
      [Richard Levitte]