diff options
| author | Pauli <ppzgs1@gmail.com> | 2024-07-24 03:45:51 +0200 |
|---|---|---|
| committer | Pauli <ppzgs1@gmail.com> | 2024-07-26 02:10:14 +0200 |
| commit | 50a91de440f05e369f02e10c34aaf16fca4dbc62 (patch) | |
| tree | 6d880c1602a809d7c744d5134ca36316edc122b0 /CHANGES.md | |
| parent | test: add unit tests for no-short-mac (diff) | |
| download | openssl-50a91de440f05e369f02e10c34aaf16fca4dbc62.tar.xz openssl-50a91de440f05e369f02e10c34aaf16fca4dbc62.zip | |
changes: add no_short_mac entry
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/24917)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/CHANGES.md b/CHANGES.md index 7b3ec56fc8..594efc44de 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -29,6 +29,12 @@ OpenSSL 3.4 ### Changes between 3.3 and 3.4 [xx XXX xxxx] + * Add FIPS provider configuration option to enforce the a minimal + MAC length check. The option '-no_short_mac' can optionally be + supplied to 'openssl fipsinstall'. + + *Paul Dale* + * Redesigned Windows use of OPENSSLDIR/ENGINESDIR/MODULESDIR such that what were formerly build time locations can now be defined at run time with registry keys. See NOTES-WINDOWS.md @@ -1108,7 +1114,7 @@ OpenSSL 3.1 * Add FIPS provider configuration option to enforce the Extended Master Secret (EMS) check during the TLS1_PRF KDF. - The option '-ems-check' can optionally be supplied to + The option '-ems_check' can optionally be supplied to 'openssl fipsinstall'. *Shane Lontis* |