openssl/CHANGES, branch OpenSSL_1_0_2b

Prepare for 1.0.2b release

2015-06-11T13:55:38Z

Reviewed-by: Stephen Henson

Update CHANGES and NEWS

2015-06-11T13:52:39Z

Updates to CHANGES and NEWS to take account of the latest security fixes. Reviewed-by: Rich Salz

Remove export static DH ciphersuites

2015-05-22T23:01:45Z

Remove support for the two export grade static DH ciphersuites. These two ciphersuites were newly added (along with a number of other static DH ciphersuites) to 1.0.2. However the two export ones have *never* worked since they were introduced. It seems strange in any case to be adding new export ciphersuites, and given "logjam" it also does not seem correct to fix them. Reviewed-by: Richard Levitte (cherry picked from commit 13f8eb4730b9fc039e743870f81e5ff54b3d05b8) Conflicts: CHANGES

Only support >= 256-bit elliptic curves with ecdh_auto (server) or by default (client).

2015-05-20T14:04:37Z

Also reorder preferences to prefer prime curves to binary curves, and P-256 to everything else. The result: $ openssl s_server -named_curves "auto" This command will negotiate an ECDHE ciphersuite with P-256: $ openssl s_client This command will negotiate P-384: $ openssl s_client -curves "P-384" This command will not negotiate ECDHE because P-224 is disabled with "auto": $ openssl s_client -curves "P-224" Reviewed-by: Kurt Roeckx Reviewed-by: Rich Salz

client: reject handshakes with DH parameters < 768 bits.

2015-05-20T12:54:51Z

Since the client has no way of communicating her supported parameter range to the server, connections to servers that choose weak DH will simply fail. Reviewed-by: Kurt Roeckx

Prepare for 1.0.2b-dev

2015-03-19T13:34:56Z

Reviewed-by: Richard Levitte

Prepare for 1.0.2a release

2015-03-19T13:31:16Z

Reviewed-by: Richard Levitte

Update CHANGES for release

2015-03-19T12:58:35Z

Update CHANGES file with all the latest fixes ready for the release. Reviewed-by: Richard Levitte

Fix CHANGES discrepancies

2015-03-19T12:58:35Z

There were some discrepancies in the CHANGES file between the 1.0.1 version and 1.0.2. This corrects it. Reviewed-by: Richard Levitte

Remove overlapping CHANGES/NEWS entries

2015-03-19T12:58:35Z

Remove entries from CHANGES and NEWS from letter releases that occur *after* the next point release. Without this we get duplicate entries for the same issue appearing multiple times. Reviewed-by: Richard Levitte