Change in 0.9.8 branch:
Put ECCdraft ciphersuites back into default build (but disabled unless specifically requested)
This commit is contained in:
parent
850815cb6e
commit
81de1028bc
10
CHANGES
10
CHANGES
@ -315,9 +315,13 @@
|
|||||||
|
|
||||||
Changes between 0.9.8b and 0.9.8c [xx XXX xxxx]
|
Changes between 0.9.8b and 0.9.8c [xx XXX xxxx]
|
||||||
|
|
||||||
*) Disable "ECCdraft" ciphersuites (which were not part of the "ALL"
|
*) Disable "ECCdraft" ciphersuites more thoroughly. Now special
|
||||||
alias). These are now excluded from compilation by default, since
|
treatment in ssl/ssl_ciph.s makes sure that these ciphersuites
|
||||||
OpenSSL 0.9.9[-dev] should be used for TLS with elliptic curves.
|
cannot be implicitly activated as part of, e.g., the "AES" alias.
|
||||||
|
However, please upgrade to OpenSSL 0.9.9[-dev] for
|
||||||
|
non-experimental use of the ECC ciphersuites to get TLS extension
|
||||||
|
support, which is required for curve and point format negotiation
|
||||||
|
to avoid potential handshake problems.
|
||||||
[Bodo Moeller]
|
[Bodo Moeller]
|
||||||
|
|
||||||
*) Disable rogue ciphersuites:
|
*) Disable rogue ciphersuites:
|
||||||
|
Loading…
Reference in New Issue
Block a user