From: Dr. Stephen Henson Date: Fri, 30 Oct 2009 13:29:08 +0000 (+0000) Subject: Move CHANGES entry to 0.9.8l section X-Git-Tag: OpenSSL_1_0_0-beta4~18 X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=9ac5c355a24e47ab30421f88c034bec9b0188a56;p=oweals%2Fopenssl.git Move CHANGES entry to 0.9.8l section --- diff --git a/CHANGES b/CHANGES index e56fd1b396..2754eb670c 100644 --- a/CHANGES +++ b/CHANGES @@ -4,15 +4,6 @@ Changes between 0.9.8k and 1.0 [xx XXX xxxx] - *) Fixes to stateless session resumption handling. Use initial_ctx when - issuing and attempting to decrypt tickets in case it has changed during - servername handling. Use a non-zero length session ID when attempting - stateless session resumption: this makes it possible to determine if - a resumption has occurred immediately after receiving server hello - (several places in OpenSSL subtly assume this) instead of later in - the handshake. - [Steve Henson] - *) Update OCSP request code to permit adding custom headers to the request: some responders need this. [Steve Henson] @@ -836,6 +827,15 @@ Changes between 0.9.8k and 0.9.8l [xx XXX xxxx] + *) Fixes to stateless session resumption handling. Use initial_ctx when + issuing and attempting to decrypt tickets in case it has changed during + servername handling. Use a non-zero length session ID when attempting + stateless session resumption: this makes it possible to determine if + a resumption has occurred immediately after receiving server hello + (several places in OpenSSL subtly assume this) instead of later in + the handshake. + [Steve Henson] + *) The functions ENGINE_ctrl(), OPENSSL_isservice(), CMS_get1_RecipientRequest() and RAND_bytes() can return <=0 on error fixes for a few places where the return code is not checked