From 2e61f1ab32a7dbac25ca0c52eb35190cf42f5a31 Mon Sep 17 00:00:00 2001
From: "William A. Rowe Jr" <wrowe@apache.org>
Date: Thu, 14 May 2015 19:01:08 +0000
Subject: [PATCH] Document RFC 7525 changes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1679432 13f79535-47bb-0310-9956-ffa450edef68
---
 CHANGES | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/CHANGES b/CHANGES
index eccd9ae5c5..60ab61aaa1 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,14 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.5.0
 
+  *) In alignment with RFC 7525, the default recommended SSLCipherSuite
+     and SSLProxyCipherSuite now exclude RC4 as well as MD5.  Existing
+     configurations must be adjusted by the administrator. [William Rowe]
+
+  *) In alignment with RFC 7525, the default recommended SSLProtocol and
+     SSLProxyProtocol directives now excludes SSLv3.  Existing configurations
+     must be adjusted by the administrator. [William Rowe]
+
   *) mod_authn_dbd, mod_authz_dbd, mod_session_dbd, mod_rewrite: Fix lifetime
      of DB lookup entries independently of the selected DB engine.  PR 46421.
      [Steven whitson <steven.whitson gmail com>, Jan Kaluza, Yann Ylavic].
-- 
2.40.0