summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlexander Sosedkin <asosedkin@redhat.com>2021-10-20 17:49:56 +0200
committerAlexander Sosedkin <asosedkin@redhat.com>2021-10-21 10:47:08 +0200
commitd1ae9fb43e8bc74230d25f7b95065b4967aa09d7 (patch)
treed468a7760c760cae6e73b7e324631dc8bdd91d19
parent8e818ae4cf6c25d9409aabe7ccbbeb5cb8dc5e16 (diff)
downloadgnutls-d1ae9fb43e8bc74230d25f7b95065b4967aa09d7.tar.gz
NEWS: add a notice of insecure-hash filtering ciphersuites on PRF
Signed-off-by: Alexander Sosedkin <asosedkin@redhat.com>
-rw-r--r--NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 0ae6410098..de57ed5dc1 100644
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,9 @@ See the end for copying conditions.
** certtool: Certtool can now generate, manipulate, and evaluate x25519 and
x448 public keys, private keys, and certificates.
+** libgnutls: disabling a hashing algorithm through "insecure-hash"
+ configuration directive now also disables TLS ciphersuites that use it
+ as a PRF algorithm.
** API and ABI modifications:
GNUTLS_PRIVKEY_FLAG_RSA_PSS_FIXED_SALT_LENGTH: new flag in gnutls_privkey_flags_t