diff options
author | Tomas Mraz <tomas@openssl.org> | 2024-11-25 16:06:47 +0100 |
---|---|---|
committer | Tomas Mraz <tomas@openssl.org> | 2024-11-28 16:48:43 +0100 |
commit | 0bba821881868252bfca4400879682a1648da225 (patch) | |
tree | 7d439b3875054dc65550172daca0f8da8cf93d64 /CHANGES.md | |
parent | Use sk_X509_ATTRIBUTE_deep_copy() to copy attribute stacks in pk7_doit.c (diff) | |
download | openssl-0bba821881868252bfca4400879682a1648da225.tar.xz openssl-0bba821881868252bfca4400879682a1648da225.zip |
Deprecate all BIO_meth_get_*() functions
Their use by applications is inherently unsafe.
Fixes #26047
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/26056)
Diffstat (limited to 'CHANGES.md')
-rw-r--r-- | CHANGES.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index a40916a19d..ce92129a3c 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -30,6 +30,12 @@ OpenSSL 3.5 ### Changes between 3.4 and 3.5 [xx XXX xxxx] +* All the BIO_meth_get_*() functions allowing reuse of the internal OpenSSL + BIO method implementations were deprecated. The reuse is unsafe due to + dependency on the code of the internal methods not changing. + + *Tomáš Mráz* + * Support DEFAULT keyword and '-' prefix in SSL_CTX_set1_groups_list(). SSL_CTX_set1_groups_list() now supports the DEFAULT keyword which sets the available groups to the default selection. The '-' prefix allows the calling |