Compression handling on session resume was badly broken: it always

[thirdparty/openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index bba32ef79b0313338d682572c3ce7dc626ff3aec..9f15d3d6a1a74023b792a7a34320c6763a33dbeb 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -44,6 +44,11 @@
 
  Changes between 0.9.8m (?) and 1.0.0  [xx XXX xxxx]
 
+  *) Fix compression algorithm handling: if resuming a session use the
+     compression algorithm of the resumed session instead of determining
+     it from client hello again. Don't allow server to change algorithm.
+     [Steve Henson]
+
   *) Constify crypto/cast (i.e., <openssl/cast.h>): a CAST_KEY doesn't
      change when encrypting or decrypting.
      [Bodo Moeller]