SHA-2 ciphersuites now require TLS 1.x
diff --git a/ChangeLog b/ChangeLog index 536d829..58f8809 100644 --- a/ChangeLog +++ b/ChangeLog
@@ -5,6 +5,10 @@ * Support escaping of commas in x509_string_to_names() * Fix compile error in ssl_pthread_server (found by Julian Ospald). +Changes + * Ciphersuites using SHA-256 or SHA-384 now require TLS 1.x (there is no + standard defining how to use SHA-2 with SSL 3.0). + = PolarSSL 1.3.8 released 2014-07-11 Security * Fix length checking for AEAD ciphersuites (found by Codenomicon).