summaryrefslogtreecommitdiff
path: root/CHANGES
diff options
context:
space:
mode:
authorBodo Moeller <bodo@openssl.org>2014-10-15 04:03:28 +0200
committerBodo Moeller <bodo@openssl.org>2014-10-15 04:03:28 +0200
commitcf6da05304d554aaa885151451aa4ecaa977e601 (patch)
treebe3b67fd78ae75a3cc8e6b79f934a5db63ea11e4 /CHANGES
parentffa08b3242e0f10f1fef3c93ef3f0b51de8c27a9 (diff)
downloadopenssl-new-cf6da05304d554aaa885151451aa4ecaa977e601.tar.gz
Support TLS_FALLBACK_SCSV.
Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES6
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index f67fe39367..7c25d4a857 100644
--- a/CHANGES
+++ b/CHANGES
@@ -305,6 +305,12 @@
Changes between 1.0.1h and 1.0.2 [xx XXX xxxx]
+ *) Add support for TLS_FALLBACK_SCSV.
+ Client applications doing fallback retries should call
+ SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
+ (CVE-2014-3566)
+ [Adam Langley, Bodo Moeller]
+
*) Accelerated NIST P-256 elliptic curve implementation for x86_64
(other platforms pending).
[Shay Gueron (Intel Corp), Andy Polyakov]