From: Andy Polyakov Date: Thu, 25 Aug 2016 10:08:35 +0000 (+0200) Subject: CHANGES: mention Windows UTF-8 opt-in option. X-Git-Tag: OpenSSL_1_1_0~2 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=eedb9db9afd531e9dc69a33b73c7e1cd27153b0b;p=openssl CHANGES: mention Windows UTF-8 opt-in option. Reviewed-by: Richard Levitte --- diff --git a/CHANGES b/CHANGES index 78a5a4d51c..a5796ac75b 100644 --- a/CHANGES +++ b/CHANGES @@ -4,6 +4,14 @@ Changes between 1.0.2h and 1.1.0 [xx XXX xxxx] + *) Windows command-line tool supports UTF-8 opt-in option for arguments + and console input. Setting OPENSSL_WIN32_UTF8 environment variable + (to any value) allows Windows user to access PKCS#12 file generated + with Windows CryptoAPI and protected with non-ASCII password, as well + as files generated under UTF-8 locale on Linux also protected with + non-ASCII password. + [Andy Polyakov] + *) To mitigate the SWEET32 attack (CVE-2016-2183), 3DES cipher suites have been disabled by default and removed from DEFAULT, just like RC4. See the RC4 item below to re-enable both.