[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[or-cvs] [tor/master] Add changelog entry to 0.2.2.x about openssl 0.9.8l fix



Author: Nick Mathewson <nickm@xxxxxxxxxxxxxx>
Date: Fri, 6 Nov 2009 15:25:41 -0500
Subject: Add changelog entry to 0.2.2.x about openssl 0.9.8l fix
Commit: 2db0256372e02edfa517ad5b56106f7210ddd7ab

---
 ChangeLog |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 679d576..3edcbae 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -25,6 +25,12 @@ Changes in version 0.2.2.6-alpha - 2009-10-??
       DisableAllSwap, please consider using the User option to properly reduce
       the privileges of your Tor.
 
+  o Major bugfixes:
+    - Work around a security feature in OpenSSL 0.9.8l that prevents our
+      handshake from working unless we explicitly tell OpenSSL that we are
+      using SSL renegotiation safely.  We are, of course, but OpenSSL
+      0.9.8l won't work unless we say we are.
+
   o Code simplifications and refactorings:
     - Numerous changes, bugfixes, and workarounds from Nathan Freitas
       to help Tor build correctly for Android phones.
-- 
1.5.6.5