From: Matt Caswell <matt@openssl.org>
Date: Tue, 12 May 2015 12:12:16 +0000 (+0100)
Subject: Add CHANGES entry for Kerberos removal
X-Git-Tag: OpenSSL_1_1_0-pre1~1159
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=c3d734701cd57575856bf9b542446811518dd28c;p=oweals%2Fopenssl.git

Add CHANGES entry for Kerberos removal

Reviewed-by: Rich Salz <rsalz@openssl.org>
---

diff --git a/CHANGES b/CHANGES
index de00a8a4ce..337b9b1364 100644
--- a/CHANGES
+++ b/CHANGES
@@ -3,11 +3,15 @@
  _______________
 
  Changes between 1.0.2 and 1.1.0  [xx XXX xxxx]
+  *) Support for Kerberos ciphersuites in TLS (RFC2712) has been removed. This
+     code and the associated standard is no longer considered fit-for-purpose.
+     [Matt Caswell]
 
   *) Added HTTP GET support to the ocsp command.
      [Rich Salz]
 
-  *) RAND_pseudo_bytes has been deprecated. Users should use RAND bytes instead.
+  *) RAND_pseudo_bytes has been deprecated. Users should use RAND_bytes instead.
+     [Matt Caswell]
 
   *) Added support for TLS extended master secret from
      draft-ietf-tls-session-hash-03.txt. Thanks for Alfredo Pironti for an