From: Alan T. DeKok Date: Fri, 7 Apr 2023 13:58:10 +0000 (-0400) Subject: note recent changes X-Git-Tag: release_3_2_3~75 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a7a2ba50434e76b8bcb018a4a18a0526f6baa553;p=thirdparty%2Ffreeradius-server.git note recent changes --- diff --git a/doc/ChangeLog b/doc/ChangeLog index c55dab1e90..9bf95977f3 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -13,17 +13,16 @@ FreeRADIUS 3.2.3 Thu 16 Feb 2023 12:00:00 EDT urgency=low Bug fixes * Don't leak MD contexts with OpenSSL 3.0. * increase internal buffer size for TLS connections, which - helps with high-load proxies. + can help with high-load proxies. * Send Status-Server checks for TLS connections - * "update CoA" cannot be used with "fake" packets, - i.e. inner-tunnel and virtual home servers. + * Give descriptive error if "update CoA" is used with "fake" packets, + as it won't work. i.e. inner-tunnel and virtual home servers. * Many small ASAN / LSAN fixes from Jorge Pereira. * Close inbound RADIUS/TLS socket on TLS errors. When a home server sees a TLS error, it will now close the socket, so proxies do not have an open (but dead) TLS connection. - * Change the way we mutex lock inbound RADIUS/TLS connections. - This change avoids random issues with "bad record mac" due to poorly - defined SSL mutex locking behavior. + * Fix mutex locking issues on inbound RADIUS/TLS connections. + This change avoids random issues with "bad record mac". FreeRADIUS 3.2.2 Thu 16 Feb 2023 12:00:00 EDT urgency=low Configuration changes