certain changes have to be listed twice in this file because OpenSSL

0.9.6h forked into 0.9.6i and 0.9.7 ...

diff --git a/CHANGES b/CHANGES
index 067516cc5bec6dd3fe20b5404a3ef0b8dbf0eebc..4997509f20ba2c668567e4855626b33ba7208229 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -8,6 +8,11 @@
      exiting on the first error in a request.
      [Steve Henson]
 
+  *) In ssl3_accept() (ssl/s3_srvr.c) only accept a client certificate
+     if the server requested one: as stated in TLS 1.0 and SSL 3.0
+     specifications.
+     [Steve Henson]
+
   *) In ssl3_get_client_hello() (ssl/s3_srvr.c), tolerate additional
      extra data after the compression methods not only for TLS 1.0
      but also for SSL 3.0 (as required by the specification).