projects
/
openssl.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
502dfeb
)
CHANGEs: fix typos and clarify.
author
Andy Polyakov
<appro@openssl.org>
Thu, 26 Apr 2012 07:25:04 +0000
(07:25 +0000)
committer
Andy Polyakov
<appro@openssl.org>
Thu, 26 Apr 2012 07:25:04 +0000
(07:25 +0000)
CHANGES
patch
|
blob
|
history
diff --git
a/CHANGES
b/CHANGES
index 03640cf581e7ea5a6bc5be10d190eac57e52a26c..803a2ce4e5c80aeb532498267a039898fbece2b9 100644
(file)
--- a/
CHANGES
+++ b/
CHANGES
@@
-4,14
+4,16
@@
Changes between 1.0.1a and 1.0.1b [xx XXX xxxx]
Changes between 1.0.1a and 1.0.1b [xx XXX xxxx]
- *) OpenSSL 1.0.0 set SSL_OP_ALL to 0x80000FFFL and OpenSSL 1.0.1 and
+ *) OpenSSL 1.0.0 set
s
SSL_OP_ALL to 0x80000FFFL and OpenSSL 1.0.1 and
1.0.1a set SSL_OP_NO_TLSv1_1 to 0x00000400L which would unfortunately
mean any application compiled against OpenSSL 1.0.0 headers setting
SSL_OP_ALL would also set SSL_OP_NO_TLSv1_1, unintentionally disablng
1.0.1a set SSL_OP_NO_TLSv1_1 to 0x00000400L which would unfortunately
mean any application compiled against OpenSSL 1.0.0 headers setting
SSL_OP_ALL would also set SSL_OP_NO_TLSv1_1, unintentionally disablng
- TLS 1.1 also. Fix this by changing the value o
t
SSL_OP_NO_TLSv1_1 to
+ TLS 1.1 also. Fix this by changing the value o
f
SSL_OP_NO_TLSv1_1 to
0x10000000L Any application which was previously compiled against
OpenSSL 1.0.1 or 1.0.1a headers and which cares about SSL_OP_NO_TLSv1_1
0x10000000L Any application which was previously compiled against
OpenSSL 1.0.1 or 1.0.1a headers and which cares about SSL_OP_NO_TLSv1_1
- will need to be recompiled as a result.
+ will need to be recompiled as a result. Letting be results in
+ inability to disable specifically TLS 1.1 and in client context,
+ in unlike event, limit maximum offered version to TLS 1.0 [see below].
[Steve Henson]
*) In order to ensure interoperabilty SSL_OP_NO_protocolX does not
[Steve Henson]
*) In order to ensure interoperabilty SSL_OP_NO_protocolX does not