summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorPhil Pennock <pdp@exim.org>2017-05-20 23:17:21 -0400
committerPhil Pennock <pdp@exim.org>2017-05-20 23:17:21 -0400
commit6600985a2331eeaa8af525eb627edfe08b1a2e9c (patch)
tree6ee2fd7bc84e8ef81c5450e3d892664a66fc55cc /doc
parenta5ffa9b475a426bc73366db01f7cc92a3811bc3a (diff)
Use DH_bits for OpenSSL 1.1.0
Fixes bug 2095
Diffstat (limited to 'doc')
-rw-r--r--doc/doc-txt/ChangeLog6
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index 6ba9a3e5e..05dc007de 100644
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -92,6 +92,12 @@ JH/13 Do pipelining under TLS. Previously, although safe, no advantage was
a single packet). As a side issue, smtp_enforce_sync now works on TLS
connections.
+PP/05 OpenSSL/1.1: use DH_bits() for more accurate DH param sizes. This
+ affects you only if you're dancing at the edge of the param size limits.
+ If you are, and this message makes sense to you, then: raise the
+ configured limit or use OpenSSL 1.1. Nothing we can do for older
+ versions.
+
Exim version 4.89
-----------------