summaryrefslogtreecommitdiff
path: root/doc/doc-txt
diff options
context:
space:
mode:
authorJeremy Harris <jgh146exb@wizmail.org>2016-01-14 21:13:01 +0000
committerJeremy Harris <jgh146exb@wizmail.org>2016-01-14 21:13:01 +0000
commita57b620090bf63a65f16624dcaeb883b4f4a0346 (patch)
tree1a929f6b26ce6379e3ee2e372882585e54b88671 /doc/doc-txt
parent731c6a90439a22e26418f75ce9207a0c8ab112dc (diff)
OpenSSL: Default the SINGLE_DH_USE option flag set
Diffstat (limited to 'doc/doc-txt')
-rw-r--r--doc/doc-txt/ChangeLog4
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index 52d4aeb56..09437e40e 100644
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -144,6 +144,10 @@ JH/34 Bug 1192: replace the embedded copy of PolarSSL RSA routines in the DKIM
support, by using OpenSSL or GnuTLS library ones. This means DKIM is
only supported when built with TLS support.
+JH/35 Require SINGLE_DH_USE by default in OpenSSL (main config option
+ openssl_options), for security. OpenSSL forces this from version 1.1.0
+ server-side so match that on older versions.
+
Exim version 4.86
-----------------