summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@redhat.com>2017-06-27 08:42:10 +0200
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2017-09-13 07:52:18 +0000
commitd5bb194066f327b2de0d96c9c54a0db48c71b924 (patch)
tree3fa6c979cff802019ce650f84f69e5d177c5ddee
parent966a3c90f38b7345dfeacadbf72818f203891077 (diff)
downloadgnutls-d5bb194066f327b2de0d96c9c54a0db48c71b924.tar.gz
doc update
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
-rw-r--r--NEWS4
1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index b3fb4a361c..766336a6d0 100644
--- a/NEWS
+++ b/NEWS
@@ -19,6 +19,10 @@ See the end for copying conditions.
accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That will signal
the function to auto-detect an appropriate hash algorithm to use.
+** libgnutls: Removed support for signature algorithms using SHA2-224 in TLS.
+ TLS 1.3 no longer uses SHA2-224 and it was never a widespread algorithm
+ in TLS 1.2. As such, no reason to keep supporting it.
+
** p11tool: added options --sign-params and --hash. This allows testing
signature with multiple algorithms, including RSA-PSS.