Revert "Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512."

[users/heiko/exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index e7b807e3cb1e01c2cf0a3f1654a4e3c6b49b16d1..6c0554b5afc66ae78dd279bcd94eb8773c29557a 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -158,6 +158,13 @@ PP/37 Unbreak Cyrus SASL auth: SSF retrieval was incorrect, Exim thought
       protection layer was required, which is not implemented.
       Bugzilla 1254, patch from Wolfgang Breyha.
 
       protection layer was required, which is not implemented.
       Bugzilla 1254, patch from Wolfgang Breyha.
 

+PP/38 Overhaul DH prime handling, supply RFC-specified DH primes as built
+      into Exim, default to IKE id 23 from RFC 5114 (2048 bit).  Make
+      tls_dhparam take prime identifiers.  Also unbreak combination of
+      OpenSSL+DH_params+TLSSNI.
+
+PP/39 Disable SSLv2 by default in OpenSSL support.
+

 
 Exim version 4.77
 -----------------
 
 Exim version 4.77
 -----------------