For DH, use standard primes from RFCs

[exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index 9db1c38238d61163de659cbfba8401c74dcace69..4f8154c7eecbd54bb0b20cc2a07a02e19a4350f1 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -143,7 +143,25 @@ PP/33 Added tls_dh_max_bits option, defaulting to current hard-coded limit
 
 PP/34 Validate tls_require_ciphers on startup, since debugging an invalid
       string otherwise requires a connection and a bunch more work and it's
 
 PP/34 Validate tls_require_ciphers on startup, since debugging an invalid
       string otherwise requires a connection and a bunch more work and it's

-      relatively easy to get wrong.
+      relatively easy to get wrong.  Should also expose TLS library linkage
+      problems.
+
+PP/35 Pull in <features.h> on Linux, for some portability edge-cases of
+      64-bit ${eval} (JH/03).
+
+PP/36 Define _GNU_SOURCE in exim.h; it's needed for some releases of
+      GNU libc to support some of the 64-bit stuff, should not lead to
+      conflicts.  Defined before os.h is pulled in, so if a given platform
+      needs to override this, it can.
+
+PP/37 Unbreak Cyrus SASL auth: SSF retrieval was incorrect, Exim thought
+      protection layer was required, which is not implemented.
+      Bugzilla 1254, patch from Wolfgang Breyha.
+
+PP/38 Overhaul DH prime handling, supply RFC-specified DH primes as built
+      into Exim, default to IKE id 23 from RFC 5114 (2048 bit).  Make
+      tls_dhparam take prime identifiers.  Also unbreak combination of
+      OpenSSL+DH_params+TLSSNI.

 
 
 Exim version 4.77
 
 
 Exim version 4.77