diff options
| author | Rickard Green <[email protected]> | 2017-03-14 16:21:00 +0100 | 
|---|---|---|
| committer | Rickard Green <[email protected]> | 2017-03-14 16:21:00 +0100 | 
| commit | 27df945c35aa541330700d75b6844de9886361b2 (patch) | |
| tree | 7fd93336232d2e8f17612ffcf114d9d7e1038fe9 /lib/ssl/doc/src | |
| parent | aec64f75c5a2a044b9e5cec77fb2ca243ff1b212 (diff) | |
| parent | a748cafdc7063d9f181ba12088db6458793ced2f (diff) | |
| download | otp-27df945c35aa541330700d75b6844de9886361b2.tar.gz otp-27df945c35aa541330700d75b6844de9886361b2.tar.bz2 otp-27df945c35aa541330700d75b6844de9886361b2.zip | |
Merge branch 'maint'
* maint:
  Updated OTP version
  Prepare release
Conflicts:
	OTP_VERSION
	lib/typer/doc/src/notes.xml
	lib/typer/vsn.mk
Diffstat (limited to 'lib/ssl/doc/src')
| -rw-r--r-- | lib/ssl/doc/src/notes.xml | 64 | 
1 files changed, 64 insertions, 0 deletions
| diff --git a/lib/ssl/doc/src/notes.xml b/lib/ssl/doc/src/notes.xml index 29b8e8ff67..d3ab3e9216 100644 --- a/lib/ssl/doc/src/notes.xml +++ b/lib/ssl/doc/src/notes.xml @@ -28,6 +28,70 @@    <p>This document describes the changes made to the SSL application.</p> +<section><title>SSL 8.1.1</title> + +    <section><title>Fixed Bugs and Malfunctions</title> +      <list> +        <item> +          <p> +	    Corrected termination behavior, that caused a PEM cache +	    bug and sometimes resulted in connection failures.</p> +          <p> +	    Own Id: OTP-14100</p> +        </item> +        <item> +          <p> +	    Fix bug that could hang ssl connection processes when +	    failing to require more data for very large handshake +	    packages. Add option max_handshake_size to mitigate DoS +	    attacks.</p> +          <p> +	    Own Id: OTP-14138</p> +        </item> +        <item> +          <p> +	    Improved support for CRL handling that could fail to work +	    as intended when an id-ce-extKeyUsage was present in the +	    certificate. Also improvements where needed to +	    distributionpoint handling so that all revocations +	    actually are found and not deemed to be not determinable.</p> +          <p> +	    Own Id: OTP-14141</p> +        </item> +        <item> +          <p> +	    A TLS handshake might accidentally match old sslv2 format +	    and ssl application would incorrectly aborted TLS +	    handshake with ssl_v2_client_hello_no_supported. Parsing +	    was altered to avoid this problem.</p> +          <p> +	    Own Id: OTP-14222</p> +        </item> +        <item> +          <p> +	    Correct default cipher list to prefer AES 128 before 3DES</p> +          <p> +	    Own Id: OTP-14235</p> +        </item> +      </list> +    </section> + + +    <section><title>Improvements and New Features</title> +      <list> +        <item> +          <p> +	    Move PEM cache to a dedicated process, to avoid making +	    the SSL manager process a bottleneck. This improves +	    scalability of TLS connections.</p> +          <p> +	    Own Id: OTP-13874</p> +        </item> +      </list> +    </section> + +</section> +  <section><title>SSL 8.1</title>      <section><title>Fixed Bugs and Malfunctions</title> | 
