Add a CHANGES entry for the unrecognised record type change

Reviewed-by: N Tim Hudson <tjh@openssl.org>

Add a CHANGES entry for the unrecognised record type change
Reviewed-by: N Tim Hudson <tjh@openssl.org>
ce95f3b7 · Matt Caswell · 1f3e70a4 · ce95f3b7
隐藏空白更改
内联并排

Showing with 5 addition and 1 deletion

CHANGES CHANGES +5 -1

未找到文件。
--- a/CHANGES
+++ b/CHANGES
@@ -4,7 +4,11 @@
 Changes between 1.1.0a and 1.1.1 [xx XXX xxxx]
-  *)
+  *) OpenSSL now fails if it receives an unrecognised record type in TLS1.0
+     or TLS1.1. Previously this only happened in SSLv3 and TLS1.2. This is to
+     prevent issues where no progress is being made and the peer continually
+     sends unrecognised record types, using up resources processing them.
+     [Matt Caswell]
  *) 'openssl passwd' can now produce SHA256 and SHA512 based output,
     using the algorithm defined in