Use "SECURE:-SHA1:+SHA1" as GnuTLS priority string.

[tlsproxy/tlsproxy.git] / NEWS

diff --git a/NEWS b/NEWS
index 05be382066a4ead68e77958a1064a912a99d03fa..30b8672d573f85de031f18e07f3e8a8b0c7399a5 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,12 +1,36 @@
 NEWS
 ====
 
+0.X
+---
+
+- Important: The file proxy-dh.pem is now required. tlsproxy-setup creates it,
+  but running it will overwrite the existing proxy-*.pem files. To create only
+  proxy-dh.pem use:
+
+    certtool --generate-dh-params --sec-param high --outfile proxy-dh.pem
+
+- Add -a option, authentication for tlsproxy via basic digest authentication.
+- Use pre-generated Diffie-Hellman parameters in proxy-dh.pem.
+- Code cleanup.
+- Better error handling.
+- Fix compile with recent GnuTLS (e.g. 3.2.3).
+- Improve (error) logging; log to stderr.
+- Add (basic) man pages.
+- Improve test suite.
+- tlsproxy-setup: Increase expiry-date and use larger private key, generate
+                  proxy-dh.pem.
+
+
 0.2
 ---
+
 - Add -u option, passthrough TLS connections to unknown hostnames.
 - Add ./configure --disable-ipv6 for IPv4 only machines.
 - Send HTML with error messages (not only headers).
 
+
 0.1
 ---
+
 - First release.