From f7696713daeece5e5c11d2ff7f1c579309a8b9f8 Mon Sep 17 00:00:00 2001 From: TJ Saunders Date: Thu, 19 Aug 2021 07:29:49 -0700 Subject: [PATCH] Update NEWS, release notes for Bug #4443. --- NEWS | 4 ++++ RELEASE_NOTES | 2 ++ 2 files changed, 6 insertions(+) diff --git a/NEWS b/NEWS index b8f351c35e..fc1dcb9052 100644 --- a/NEWS +++ b/NEWS @@ -33,6 +33,10 @@ ProFTPD to stop. - Issue 1286 - Add support for the libidn2 library, over libidn, for e.g. mod_rewrite mappings. +- Bug 4443 - Changed the default behavior of mod_tls, such that TLS + renegotiations on control/data connections are not requested by default. + TLS renegotiations have a long and sordid history; many SSL/TLS libraries no + longer implement them, or disable them by default. 1.3.8rc1 - Released 13-Jun-2021 -------------------------------- diff --git a/RELEASE_NOTES b/RELEASE_NOTES index 4fc467b468..760126d8dd 100644 --- a/RELEASE_NOTES +++ b/RELEASE_NOTES @@ -13,6 +13,8 @@ ChangeLog files. RegexOptions Engine (Issue #1300) + TLSRenegotiate defaults (Bug #4443) + 1.3.8rc1 ---------