Add TLS::Policy::server_uses_own_ciphersuite_preferences()

Previously the server always took its most-preferred cipher out of the
client's list, but this policy allows telling a server to follow the
client's preferences insetad.

1 files changed, 7 insertions, 0 deletions

diff --git a/doc/relnotes/1_11_3.rst b/doc/relnotes/1_11_3.rst
index 6b0ba1492..ac4de76aa 100644
--- a/doc/relnotes/1_11_3.rst
+++ b/doc/relnotes/1_11_3.rst
@@ -1,6 +1,13 @@
 Version 1.11.3, Not Yet Released
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 
+* A new TLS policy mechanism
+  :cpp:func:`TLS::Policy::server_uses_own_ciphersuite_preferences`
+  controls how a server chooses a ciphersuite. Previously it always
+  chose its most preferred cipher out of the client's list, but this
+  can allow configuring a server to choose by the client's preferences
+  instead.
+
 * Implementations of the OCB and GCM authenticated cipher modes are
   now included