generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Change in 0.9.8 branch:

Browse Source 
Put ECCdraft ciphersuites back into default build (but disabled
unless specifically requested)
This commit is contained in:
Bodo Möller 2006-06-22 12:37:28 +00:00
parent 850815cb6e
commit 81de1028bc
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
CHANGES
View File

@ -315,9 +315,13 @@
Changes between 0.9.8b and 0.9.8c [xx XXX xxxx]
*) Disable "ECCdraft" ciphersuites (which were not part of the "ALL"
alias). These are now excluded from compilation by default, since
OpenSSL 0.9.9[-dev] should be used for TLS with elliptic curves.
*) Disable "ECCdraft" ciphersuites more thoroughly. Now special
treatment in ssl/ssl_ciph.s makes sure that these ciphersuites
cannot be implicitly activated as part of, e.g., the "AES" alias.
However, please upgrade to OpenSSL 0.9.9[-dev] for
non-experimental use of the ECC ciphersuites to get TLS extension
support, which is required for curve and point format negotiation
to avoid potential handshake problems.
[Bodo Moeller]
*) Disable rogue ciphersuites: