From 3d040d098384c48be39e47862d55cac1bc0c578c Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Tue, 12 Apr 2022 13:27:41 +0100 Subject: TLS resumption: restrict session re-use --- doc/doc-txt/ChangeLog | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'doc/doc-txt') diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index 239731436..8c46dcc7d 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -126,6 +126,11 @@ JH/28 OpenSSL: fix transport-required OCSP stapling verification under session passed on the wire for the restarted session. Fix by using the recorded ocsp status of the stored session for the new connection. +JH/29 TLS resumption: the key for session lookup in the client now includes + more info that a server could potentially use in configuring a TLS + session, avoiding oferring mismatching sessions to such a server. + Previously only the server IP was used. + Exim version 4.95 ----------------- -- cgit v1.2.3