summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeremy Harris <jgh146exb@wizmail.org>2018-04-12 16:55:42 +0100
committerJeremy Harris <jgh146exb@wizmail.org>2018-04-12 17:01:40 +0100
commit0f9d3f8ba8cf8b559b74ba9166d8a436498651b4 (patch)
tree40be55aa0ce861aede6bf845be1cf69cce2ceb62
parent571e973c3497311689c83cb8c27b35f02e46cdc5 (diff)
Docs: add known broken-version info for OpenSSL behavior
-rw-r--r--doc/doc-docbook/spec.xfpt6
1 files changed, 4 insertions, 2 deletions
diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt
index 562fb09e4..d8f1573c9 100644
--- a/doc/doc-docbook/spec.xfpt
+++ b/doc/doc-docbook/spec.xfpt
@@ -12997,7 +12997,8 @@ It is only useful as the argument of a
&%certextract%& expansion item, &%md5%&, &%sha1%& or &%sha256%& operator,
or a &%def%& condition.
-&*Note*&: Under current versions of OpenSSL, when a list of more than one
+&*Note*&: Under versions of OpenSSL preceding 1.1.1,
+when a list of more than one
file is used for &%tls_certificate%&, this variable is not reliable.
.vitem &$tls_in_peercert$&
@@ -17237,7 +17238,8 @@ option in the relevant &(smtp)& transport.
&*Note*&: If you use filenames based on IP addresses, change the list
separator in the usual way to avoid confusion under IPv6.
-&*Note*&: Under current versions of OpenSSL, when a list of more than one
+&*Note*&: Under versions of OpenSSL preceding 1.1.1,
+when a list of more than one
file is used, the &$tls_in_ourcert$& variable is unreliable.
&*Note*&: OCSP stapling is not usable under OpenSSL