X-Git-Url: https://git.exim.org/exim.git/blobdiff_plain/16880d1a95a51a8b57692b216512e8cbb7cc917d..83f4c7515f3eb06dc070e78edd2694c1d088e5fd:/doc/doc-txt/ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index e7b807e3c..46e2dcf8a 100644
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -158,6 +158,17 @@ PP/37 Unbreak Cyrus SASL auth: SSF retrieval was incorrect, Exim thought
       protection layer was required, which is not implemented.
       Bugzilla 1254, patch from Wolfgang Breyha.
 
+PP/38 Overhaul DH prime handling, supply RFC-specified DH primes as built
+      into Exim, default to IKE id 23 from RFC 5114 (2048 bit).  Make
+      tls_dhparam take prime identifiers.  Also unbreak combination of
+      OpenSSL+DH_params+TLSSNI.
+
+PP/39 Disable SSLv2 by default in OpenSSL support.
+
+PP/40 Lower default size of EXIM_CLIENT_DH_MIN_BITS constant (used only by
+      GnuTLS at this time) from 1024 to 512.  Cautious folk can override
+      in Local/Makefile.
+
 
 Exim version 4.77
 -----------------