From 2e51098b34ff57cd9601f2ad27faae9e296eb237 Mon Sep 17 00:00:00 2001 From: Jarno Lamsa Date: Thu, 13 Jun 2019 10:42:13 +0300 Subject: [PATCH] Add changelog entry --- ChangeLog | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/ChangeLog b/ChangeLog index e769dc27ab..a48baf43e7 100644 --- a/ChangeLog +++ b/ChangeLog @@ -24,6 +24,14 @@ Features mbedtls_ssl_session_load() to allow serializing a session, for example to store it in non-volatile storage, and later using it for TLS session resumption. + * Add new API function mbedtls_ssl_conf_extended_master_secret_enforce() to + allow enforcing the usage of ExtendedMasterSecret extension. If the + extension is used and this option is enabled, handshakes not leading to + the use of the extended master secret will be aborted. On the server, + fail the handshake if client doesn't advertise the ExtendedMasterSecret + extension. On the client, fail the handshake if the server doesn't + consent to the use of the ExtendedMasterSecret extension in its + ServerHello. Bugfix * Server's RSA certificate in certs.c was SHA-1 signed. In the default