Loading CHANGES +5 −4 Original line number Diff line number Diff line Loading @@ -5,10 +5,11 @@ Changes between 0.9.8k and 0.9.8l [5 Nov 2009] *) Disable renegotiation completely - this fixes a severe security problem at the cost of breaking all renegotiation. Renegotiation can be re-enabled by setting OPENSSL_ENABLE_UNSAFE_LEGACY_SESSION_RENEGOTATION at compile-time. This is really not recommended. problem (CVE-2009-3555) at the cost of breaking all renegotiation. Renegotiation can be re-enabled by setting SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION in s3->flags at run-time. This is really not recommended unless you know what you're doing. [Ben Laurie] Changes between 0.9.8j and 0.9.8k [25 Mar 2009] Loading Loading
CHANGES +5 −4 Original line number Diff line number Diff line Loading @@ -5,10 +5,11 @@ Changes between 0.9.8k and 0.9.8l [5 Nov 2009] *) Disable renegotiation completely - this fixes a severe security problem at the cost of breaking all renegotiation. Renegotiation can be re-enabled by setting OPENSSL_ENABLE_UNSAFE_LEGACY_SESSION_RENEGOTATION at compile-time. This is really not recommended. problem (CVE-2009-3555) at the cost of breaking all renegotiation. Renegotiation can be re-enabled by setting SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION in s3->flags at run-time. This is really not recommended unless you know what you're doing. [Ben Laurie] Changes between 0.9.8j and 0.9.8k [25 Mar 2009] Loading