Delete NULL ciphers from 'ALL' in the cipher list aliases. This means that
NULL ciphers specifically have to be enabled with e.g. "DEFAULT:eNULL". This prevents cipher lists from inadvertantly having NULL ciphers at the top of their list (e.g. the default ones) because they didn't have to be taken into account before.
This commit is contained in:
6
CHANGES
6
CHANGES
@@ -5,6 +5,12 @@
|
||||
|
||||
Changes between 0.9.1c and 0.9.2
|
||||
|
||||
*) Change the meaning of 'ALL' in the cipher list. It now means "everything
|
||||
except NULL ciphers". This means the default cipher list will no longer
|
||||
enable NULL ciphers. They need to be specifically enabled e.g. with
|
||||
the string "DEFAULT:eNULL".
|
||||
[Steve Henson]
|
||||
|
||||
*) Fix to RSA private encryption routines: if p < q then it would
|
||||
occasionally produce an invalid result. This will only happen with
|
||||
externally generated keys because OpenSSL (and SSLeay) ensure p > q.
|
||||
|
||||
Reference in New Issue
Block a user