X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=NEWS;h=3f3c66399e1542a28d592d0d374be246c570ded1;hb=412b6491a940ba3de97e5be95bd35197e51ee210;hp=30b8672d573f85de031f18e07f3e8a8b0c7399a5;hpb=219d904b7d12173ee93d016fe1a2cb8ae32eea9c;p=tlsproxy%2Ftlsproxy.git

diff --git a/NEWS b/NEWS
index 30b8672..3f3c663 100644
--- a/NEWS
+++ b/NEWS
@@ -5,12 +5,18 @@ NEWS
 ---
 
 - Important: The file proxy-dh.pem is now required. tlsproxy-setup creates it,
-  but running it will overwrite the existing proxy-*.pem files. To create only
-  proxy-dh.pem use:
+  but running it will overwrite the existing proxy-*.pem files (which will
+  invalidate all certificate-*-proxy.pem files). To create only proxy-dh.pem
+  use:
 
     certtool --generate-dh-params --sec-param high --outfile proxy-dh.pem
 
+- Use "SECURE" as GnuTLS priority string which disallows insecure algorithms.
 - Add -a option, authentication for tlsproxy via basic digest authentication.
+- Add new debug level (-d 3) for even more debug output, including information
+  about the current TLS session.
+- Allow rehandshakes for server connections (%SAFE_RENEGOTIATION is forced to
+  prevent issues).
 - Use pre-generated Diffie-Hellman parameters in proxy-dh.pem.
 - Code cleanup.
 - Better error handling.