generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Move change note for SSL_OP_SAFARI_ECDHE_ECDSA_BUG.

Browse Source 
(This went into 1.0.2 too, so it's not actually a change
between 1.0.x and 1.1.0.)
This commit is contained in:
Bodo Moeller 2013-09-17 10:06:34 +02:00
parent cdf84b719c
commit 7d3ba88a98
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
CHANGES
View File

@ -2,15 +2,7 @@
OpenSSL CHANGES OpenSSL CHANGES
_______________ _______________
Changes between 1.0.x and 1.1.0 [xx XXX xxxx] Changes between 1.0.2 and 1.1.0 [xx XXX xxxx]
*) Add option SSL_OP_SAFARI_ECDHE_ECDSA_BUG (part of SSL_OP_ALL) which
avoids preferring ECDHE-ECDSA ciphers when the client appears to be
Safari on OS X. Safari on OS X 10.8..10.8.3 advertises support for
several ECDHE-ECDSA ciphers, but fails to negotiate them. The bug
is fixed in OS X 10.8.4, but Apple have ruled out both hot fixing
10.8..10.8.3 and forcing users to upgrade to 10.8.4 or newer.
[Rob Stradling, Adam Langley]
*) Experimental encrypt-then-mac support. *) Experimental encrypt-then-mac support.
@ -285,6 +277,14 @@
Changes between 1.0.1e and 1.0.2 [xx XXX xxxx] Changes between 1.0.1e and 1.0.2 [xx XXX xxxx]
*) Add option SSL_OP_SAFARI_ECDHE_ECDSA_BUG (part of SSL_OP_ALL) which
avoids preferring ECDHE-ECDSA ciphers when the client appears to be
Safari on OS X. Safari on OS X 10.8..10.8.3 advertises support for
several ECDHE-ECDSA ciphers, but fails to negotiate them. The bug
is fixed in OS X 10.8.4, but Apple have ruled out both hot fixing
10.8..10.8.3 and forcing users to upgrade to 10.8.4 or newer.
[Rob Stradling, Adam Langley]
*) New functions OPENSSL_gmtime_diff and ASN1_TIME_diff to find the *) New functions OPENSSL_gmtime_diff and ASN1_TIME_diff to find the
difference in days and seconds between two tm or ASN1_TIME structures. difference in days and seconds between two tm or ASN1_TIME structures.
[Steve Henson] [Steve Henson]