_______________
Changes between 0.9.8e and 0.9.8f [xx XXX xxxx]
+
+ *) Changes to avoid need for function casts in OpenSSL: some compilers
+ (gcc 4.2 and later) reject their use.
+ [Kurt Roeckx <kurt@roeckx.be>, Peter Hartley <pdh@utter.chaos.org.uk>,
+ Steve Henson]
*) Add RFC4507 support to OpenSSL. This includes the corrections in
RFC4507bis. The encrypted ticket format is an encrypted encoded
SSL_SESSION structure, that way new session features are automatically
supported.
- If a client application caches session in an SSL_SESSION support it
- should automatically be supported because an extension includes the
- ticket in the structure. The SSL_CTX structure automatically generates
- keys for ticket protection in servers so again support should be possible
+ If a client application caches session in an SSL_SESSION structure
+ support is transparent because tickets are now stored in the encoded
+ SSL_SESSION.
+
+ The SSL_CTX structure automatically generates keys for ticket
+ protection in servers so again support should be possible
with no application modification.
If a client or server wishes to disable RFC4507 support then the option
Add a TLS extension debugging callback to allow the contents of any client
or server extensions to be examined.
+
+ This work was sponsored by Google.
[Steve Henson]
*) Add initial support for TLS extensions, specifically for the server_name