1 | ** Version 0.5.7 |
---|
2 | - Added support for session tickets. |
---|
3 | |
---|
4 | - Depend on gnutls 2.10.0 to force support for safe |
---|
5 | renegotiation. |
---|
6 | |
---|
7 | - Optimizations in session caching. |
---|
8 | |
---|
9 | ** Version 0.5.6 (2010-03-24) |
---|
10 | - Corrected issue with firefox and long POST data (by |
---|
11 | handling EINTR and EAGAIN errors in read). |
---|
12 | |
---|
13 | - Added support for chained client certificates |
---|
14 | |
---|
15 | - Corrected more issues related to double frees |
---|
16 | http://issues.outoforder.cc/view.php?id=102 |
---|
17 | |
---|
18 | ** Version 0.5.5 (2009-06-13) |
---|
19 | |
---|
20 | - Removed limits on CA certificate loading. Reported by |
---|
21 | Sander Marechal and Jack Bates. |
---|
22 | |
---|
23 | - Do not allow sending empty TLS packets even when instructed to. |
---|
24 | This had the side effect of clients closing connection. |
---|
25 | |
---|
26 | ** Version 0.5.4 (2009-01-04) |
---|
27 | |
---|
28 | - mod_gnutls.h: modified definition to extern to avoid compilation |
---|
29 | errors in darwin. |
---|
30 | |
---|
31 | - Added patch to fix issue with mod_proxy. Investigation and patch by Alain |
---|
32 | Knaff. |
---|
33 | |
---|
34 | - libgnutls detection uses pkg-config. |
---|
35 | |
---|
36 | ** Version 0.5.3 (2008-10-16) |
---|
37 | |
---|
38 | - Corrected bug to allow having an OpenPGP-only web site. |
---|
39 | |
---|
40 | - Increased Max handshake tries due to interrupted system calls. |
---|
41 | |
---|
42 | ** Version 0.5.2 (2008-06-29) |
---|
43 | |
---|
44 | - Depend on gnutls 2.4 which has openpgp support in main library. |
---|
45 | |
---|
46 | ** Version 0.5.1 (2008-03-05) |
---|
47 | |
---|
48 | - Added --disable-srp configure option |
---|
49 | |
---|
50 | - Better check for memcache (patch by Guillaume Rousse) |
---|
51 | |
---|
52 | - Corrected possible memory leak in DBM support for resuming sessions. |
---|
53 | |
---|
54 | ** Version 0.5.0-alpha (2008-01-24) |
---|
55 | |
---|
56 | - Added support for OpenPGP keys. The new directives are: |
---|
57 | GnuTLSPGPKeyringFile, GnuTLSPGPCertificateFile, GnuTLSPGPKeyFile |
---|
58 | |
---|
59 | ** Version 0.4.2 (2007-12-10) |
---|
60 | |
---|
61 | - Added support for sending a certificate chain. |
---|
62 | |
---|
63 | - Corrected bug which did not allow the TLS session cache to be used. |
---|
64 | |
---|
65 | - Do not allow resuming sessions on different servers. |
---|
66 | |
---|
67 | ** Version 0.4.1 (2007-12-03) |
---|
68 | |
---|
69 | - Added support for subject alternative names in certificates. |
---|
70 | Only one per certificate is supported. |
---|
71 | |
---|
72 | - New enviroment variables: SSL_CLIENT_M_VERSION, SSL_CLIENT_S_SAN%, |
---|
73 | SSL_CLIENT_S_TYPE, SSL_SERVER_M_VERSION, SSL_SERVER_S_SAN%, SSL_SERVER_S_TYPE |
---|
74 | |
---|
75 | - The compatibility mode can now be enabled explicitely with the |
---|
76 | %COMPAT keyword at the GnuTLSPriorities string. It is no longer the default. |
---|
77 | |
---|
78 | - Check for GnuTLSPriorities directive. This corrects a segfault. Thanks |
---|
79 | to David Hrbáč. |
---|
80 | |
---|
81 | - Better handling of GnuTLSDHFile and GnuTLSRSAFile. |
---|
82 | |
---|
83 | - No longer default paths for RSA and DH parameter files. |
---|