From 3ad36127dbfb81dc9d2ae4e4c37432914ddfcaea Mon Sep 17 00:00:00 2001
From: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Date: Tue, 9 Mar 2021 08:41:52 -0500
Subject: [PATCH] Update changelog

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3ac961442e..ed0559b8a6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -46,6 +46,10 @@ Canonical reference for changes, improvements, and bugfixes for Boundary.
   tags](https://www.boundaryproject.io/docs/configuration/worker#tags) will be
   re-parsed and new values used
   ([PR](https://github.com/hashicorp/boundary/pull/959))
+* server: In addition to the existing `tls_min_version` listener configuration
+  value, `tls_max_version` is now supported. This should generally be left blank
+  but can be useful for situations where e.g. a load balancer has broken TLS 1.3
+  support, or does not support TLS 1.3 and flags it as a disallowed value.
 
 ## 0.1.7 (2021/02/16)