diff options
| author | lloyd <[email protected]> | 2012-09-12 13:58:17 +0000 |
|---|---|---|
| committer | lloyd <[email protected]> | 2012-09-12 13:58:17 +0000 |
| commit | feac10b901de4e1d0f88e4df7182691735f43308 (patch) | |
| tree | 3c34076e97445bfcf09408b2a306b333f1e279de /doc/relnotes | |
| parent | bd209a05a784f74bdeb38a7c93c9ce57977453a0 (diff) | |
Clarify that this is an incompatible change
Diffstat (limited to 'doc/relnotes')
| -rw-r--r-- | doc/relnotes/1_11_1.rst | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/relnotes/1_11_1.rst b/doc/relnotes/1_11_1.rst index ba767721b..79a304e50 100644 --- a/doc/relnotes/1_11_1.rst +++ b/doc/relnotes/1_11_1.rst @@ -20,7 +20,10 @@ from memory dumps (eg with a cold boot attack). The keys used in :cpp:func:`session encryption <TLS::Session::encrypt>` were previously uniquely determined by the master key. Now the encrypted session blob includes two 80 bit salts which are used in the -derivation of the cipher and MAC keys. +derivation of the cipher and MAC keys. Sessions saved by 1.11.0 will +not load in this version and vice versa. In both cases this will not +cause any errors, the session will simply not resume and instead a +full handshake will occur. New policy hooks :cpp:func:`TLS::Policy::acceptable_protocol_version` and :cpp:func:`TLS::Policy::allow_server_initiated_renegotiation` were |