openssl/CHANGES, branch OpenSSL_1_0_2a

Prepare for 1.0.2a release

2015-03-19T13:31:16Z

Reviewed-by: Richard Levitte

Update CHANGES for release

2015-03-19T12:58:35Z

Update CHANGES file with all the latest fixes ready for the release. Reviewed-by: Richard Levitte

Fix CHANGES discrepancies

2015-03-19T12:58:35Z

There were some discrepancies in the CHANGES file between the 1.0.1 version and 1.0.2. This corrects it. Reviewed-by: Richard Levitte

Remove overlapping CHANGES/NEWS entries

2015-03-19T12:58:35Z

Remove entries from CHANGES and NEWS from letter releases that occur *after* the next point release. Without this we get duplicate entries for the same issue appearing multiple times. Reviewed-by: Richard Levitte

Remove export ciphers from the DEFAULT cipher list

2015-03-07T22:02:19Z

They are moved to the COMPLEMENTOFDEFAULT instead. This also fixes SSLv2 to be part of COMPLEMENTOFDEFAULT. Reviewed-by: Rich Salz

Prepare for 1.0.2a-dev

2015-01-22T16:16:24Z

Reviewed-by: Stephen Henson

Prepare for 1.0.2 release

2015-01-22T16:12:26Z

Reviewed-by: Stephen Henson

Updates to CHANGES for 1.0.2

2015-01-22T15:14:15Z

Reviewed-by: Dr Stephen Henson

use correct credit in CHANGES

2015-01-06T22:41:27Z

Reviewed-by: Matt Caswell (cherry picked from commit 4138e3882556c762d77eb827b8be98507cde48df)

Only allow ephemeral RSA keys in export ciphersuites.

2015-01-06T12:45:10Z

OpenSSL clients would tolerate temporary RSA keys in non-export ciphersuites. It also had an option SSL_OP_EPHEMERAL_RSA which enabled this server side. Remove both options as they are a protocol violation. Thanks to Karthikeyan Bhargavan for reporting this issue. (CVE-2015-0204) Reviewed-by: Matt Caswell Reviewed-by: Tim Hudson