From ce95f3b724f71f42dd57af4a0a8e2f571deaf94d Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Wed, 2 Nov 2016 22:23:16 +0000 Subject: [PATCH] Add a CHANGES entry for the unrecognised record type change Reviewed-by: Tim Hudson --- CHANGES | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index dfff36f761..ba661db638 100644 --- a/CHANGES +++ b/CHANGES @@ -4,7 +4,11 @@ Changes between 1.1.0a and 1.1.1 [xx XXX xxxx] - *) + *) OpenSSL now fails if it receives an unrecognised record type in TLS1.0 + or TLS1.1. Previously this only happened in SSLv3 and TLS1.2. This is to + prevent issues where no progress is being made and the peer continually + sends unrecognised record types, using up resources processing them. + [Matt Caswell] *) 'openssl passwd' can now produce SHA256 and SHA512 based output, using the algorithm defined in -- 2.25.1