From 0bba821881868252bfca4400879682a1648da225 Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Mon, 25 Nov 2024 16:06:47 +0100 Subject: Deprecate all BIO_meth_get_*() functions Their use by applications is inherently unsafe. Fixes #26047 Reviewed-by: Paul Dale Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/26056) --- CHANGES.md | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'CHANGES.md') diff --git a/CHANGES.md b/CHANGES.md index a40916a19d..ce92129a3c 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -30,6 +30,12 @@ OpenSSL 3.5 ### Changes between 3.4 and 3.5 [xx XXX xxxx] +* All the BIO_meth_get_*() functions allowing reuse of the internal OpenSSL + BIO method implementations were deprecated. The reuse is unsafe due to + dependency on the code of the internal methods not changing. + + *Tomáš Mráz* + * Support DEFAULT keyword and '-' prefix in SSL_CTX_set1_groups_list(). SSL_CTX_set1_groups_list() now supports the DEFAULT keyword which sets the available groups to the default selection. The '-' prefix allows the calling -- cgit v1.2.3