From: William A. Rowe Jr <wrowe@apache.org>
Date: Thu, 14 May 2015 19:01:08 +0000 (+0000)
Subject: Document RFC 7525 changes
X-Git-Tag: 2.5.0-alpha~3151
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=2e61f1ab32a7dbac25ca0c52eb35190cf42f5a31;p=apache

Document RFC 7525 changes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1679432 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index eccd9ae5c5..60ab61aaa1 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,14 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.5.0
 
+  *) In alignment with RFC 7525, the default recommended SSLCipherSuite
+     and SSLProxyCipherSuite now exclude RC4 as well as MD5.  Existing
+     configurations must be adjusted by the administrator. [William Rowe]
+
+  *) In alignment with RFC 7525, the default recommended SSLProtocol and
+     SSLProxyProtocol directives now excludes SSLv3.  Existing configurations
+     must be adjusted by the administrator. [William Rowe]
+
   *) mod_authn_dbd, mod_authz_dbd, mod_session_dbd, mod_rewrite: Fix lifetime
      of DB lookup entries independently of the selected DB engine.  PR 46421.
      [Steven whitson <steven.whitson gmail com>, Jan Kaluza, Yann Ylavic].