diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2010-01-22 22:36:23 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2010-01-22 22:38:03 +0100 |
| commit | b8f7dabbb9572a5b49bc5d003b09a5a3cf742d83 (patch) | |
| tree | 380903fe7775b2acfe2f01d7bbd2e0d98ca68b9f | |
| parent | 1ced4c4d68cf335cf859040940a79569ba71cef1 (diff) | |
| download | gnutls-b8f7dabbb9572a5b49bc5d003b09a5a3cf742d83.tar.gz | |
Documented Steve Dispensa's patch addition.
| -rw-r--r-- | NEWS | 10 |
1 files changed, 10 insertions, 0 deletions
@@ -5,6 +5,14 @@ See the end for copying conditions. * Version 2.9.10 (unreleased) +** libgnutls: Added Steve Dispensa's patch for safe renegotiation +(draft-ietf-tls-renegotiation) that solves the issue discussed in: +http://www.ietf.org/mail-archive/web/tls/current/msg03928.html +and http://www.ietf.org/mail-archive/web/tls/current/msg03948.html +Note however that the TLS client implemented here will reject +any connections to unsafe servers unless the priority string +%UNSAFE_RENEGOTIATION is specified. + ** libgnutls: When checking openpgp self signature also check the signatures of all subkeys. Ilari Liusvaara noticed and reported the issue and provided test vectors as well. @@ -45,6 +53,8 @@ gnutls_hmac: Added gnutls_hmac_fast: Added gnutls_hmac_deinit: Added gnutls_hmac_output: Added +gnutls_safe_negotiation_set_initial: Added +gnutls_safe_renegotiation_set: Added * Version 2.9.9 (released 2009-11-09) |