From a2ca3bd78fc002dd1e6533c191e44092cc3aa949 Mon Sep 17 00:00:00 2001 From: Erlang/OTP Date: Mon, 10 Dec 2018 11:07:05 +0100 Subject: Prepare release --- lib/ssl/doc/src/notes.xml | 77 +++++++++++++++++++++++++++++++++++++++++++++++ lib/ssl/vsn.mk | 2 +- 2 files changed, 78 insertions(+), 1 deletion(-) (limited to 'lib/ssl') diff --git a/lib/ssl/doc/src/notes.xml b/lib/ssl/doc/src/notes.xml index 46fd8ab180..48372babf8 100644 --- a/lib/ssl/doc/src/notes.xml +++ b/lib/ssl/doc/src/notes.xml @@ -27,6 +27,83 @@

This document describes the changes made to the SSL application.

+
SSL 9.1 + +
Fixed Bugs and Malfunctions + + +

+ PEM cache was not evicting expired entries due to due to + timezone confusion.

+

+ Own Id: OTP-15368

+
+ +

+ Make sure an error is returned if a "transport_accept + socket" is used in some other call than ssl:handshake* or + ssl:controlling_process

+

+ Own Id: OTP-15384 Aux Id: ERL-756

+
+ +

+ Fix timestamp handling in the PEM-cache could cause + entries to not be invalidated at the correct time.

+

+ Own Id: OTP-15402

+
+ +

+ Extend check for undelivered data at closing, could under + some circumstances fail to deliver all data that was + actually received.

+

+ Own Id: OTP-15412 Aux Id: ERL-731

+
+ +

+ Correct signature check for TLS-1.2 that allows different + algorithms for signature of peer cert and peer cert key. + Not all allowed combinations where accepted.

+

+ Own Id: OTP-15415 Aux Id: ERL-763

+
+ +

+ Correct gen_statem return value, could cause + renegotiation to fail.

+

+ Own Id: OTP-15418 Aux Id: ERL-770

+
+
+
+ + +
Improvements and New Features + + +

+ Add engine support for RSA key exchange

+

+ Own Id: OTP-15420 Aux Id: ERIERL-268

+
+ +

+ ssl now uses active n internally to boost performance. + Old active once behavior can be restored by setting + application variable see manual page for ssl application + (man 6).

+

+ *** POTENTIAL INCOMPATIBILITY ***

+

+ Own Id: OTP-15449

+
+
+
+ +
+
SSL 9.0.3
Fixed Bugs and Malfunctions diff --git a/lib/ssl/vsn.mk b/lib/ssl/vsn.mk index b184c83f99..75d959accf 100644 --- a/lib/ssl/vsn.mk +++ b/lib/ssl/vsn.mk @@ -1 +1 @@ -SSL_VSN = 9.0.3 +SSL_VSN = 9.1 -- cgit v1.2.3