Skip to content

Commit

Permalink
Version bump to 2.5.0
Browse files Browse the repository at this point in the history
  • Loading branch information
Hiroshi Nakamura committed Oct 16, 2014
1 parent 80871bc commit ea04d68
Show file tree
Hide file tree
Showing 3 changed files with 32 additions and 1 deletion.
27 changes: 27 additions & 0 deletions CHANGELOG.md
@@ -1,5 +1,32 @@
## Changes

### Changes in 2.5.0

Oct 17, 2014 - version 2.5.0

**IMPORTANT CHANGES**

This version changes (again) default SSL options to help
BEAST/CRIME/POODLE Attach prevension.

* Disabled SSLv3 in favor of POODLE Attach prevention.
* Enabled 1/n-1 fragment in favor of BEAST Attach prevention.
* No TLS compression in favor of CRIME Attach prevention.

You can restore the previous SSL configuration like this;

```ruby
client = HTTPClient.new
client.ssl_config.ssl_version = :SSLv23
client.ssl_config.options = OpenSSL::SSL::OP_ALL | OpenSSL::SSL::OP_NO_SSLv2
```

* Changes
* Change default SSL options. See above.
* Keep cause error of KeepAliveDisconnected. It allows caller to
investigate the cause of KeepAliveDisconnected.


### Changes in 2.4.0

Jun 8, 2014 - version 2.4.0
Expand Down
4 changes: 4 additions & 0 deletions README.md
Expand Up @@ -78,3 +78,7 @@ Please file a ticket at the project web site.
1. find a similar ticket from https://github.com/nahi/httpclient/issues
2. create a new ticket by clicking 'Create Issue' button.
3. you can use github features such as pull-request if you like.

## Changes

See [ChangeLog](https://github.com/nahi/httpclient/blob/master/CHANGELOG.md)
2 changes: 1 addition & 1 deletion lib/httpclient/version.rb
@@ -1,3 +1,3 @@
class HTTPClient
VERSION = '2.4.0'
VERSION = '2.5.0'
end

0 comments on commit ea04d68

Please sign in to comment.