aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPaul Kehrer <paul.l.kehrer@gmail.com>2014-07-07 08:14:28 -0500
committerPaul Kehrer <paul.l.kehrer@gmail.com>2014-07-07 08:14:28 -0500
commit0c71ed7ebf9786e9751adcd6b025939776d9d57d (patch)
treef9d6b18e5b59b84acc0274f4d92508da1d4b48c0
parentbc36f4cb207ed9b478817c9e87adac13b0b15552 (diff)
parent81fed6676d8e71d86b15410c71e1083962e6f169 (diff)
downloadcryptography-0c71ed7ebf9786e9751adcd6b025939776d9d57d.tar.gz
cryptography-0c71ed7ebf9786e9751adcd6b025939776d9d57d.tar.bz2
cryptography-0c71ed7ebf9786e9751adcd6b025939776d9d57d.zip
Merge pull request #1218 from Ayrx/update-security-doc
Update security.rst to note that we statically link OpenSSL now.
-rw-r--r--docs/security.rst10
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/security.rst b/docs/security.rst
index 3d44cd3d..3bb10fa4 100644
--- a/docs/security.rst
+++ b/docs/security.rst
@@ -27,6 +27,16 @@ Supported Versions
At any given time, we will provide security support for the `master`_ branch
as well as the 2 most recent releases.
+New releases for OpenSSL updates
+--------------------------------
+
+As of version 0.5, ``cryptography`` statically links OpenSSL on Windows to ease
+installation. Due to this, ``cryptography`` will release a new version whenever
+OpenSSL has a security or bug fix release to avoid shipping insecure software.
+
+Like all our other releases, this will be announced on the mailing list and we
+strongly recommend that you upgrade as soon as possible.
+
Disclosure Process
------------------