Also check for errors in x86_64-xlate.pl.

[openssl.git] / NEWS

diff --git a/NEWS b/NEWS
index 3dcdd9c8c5dabdb0308dcd0ca01878ab072a45cb..ac3372dca534e96df164a00f5f4613e5ec79f2a8 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,13 @@
 
   Major changes between OpenSSL 1.1.1 and OpenSSL 3.0.0 [under development]
 
+      o The algorithm specific public key command line applications have
+        been deprecated.  These include dhparam, gendsa and others.  The pkey
+        alternatives should be used intead: pkey, pkeyparam and genpkey.
+      o X509 certificates signed using SHA1 are no longer allowed at security
+        level 1 or higher. The default security level for TLS is 1, so
+        certificates signed using SHA1 are by default no longer trusted to
+        authenticate servers or clients.
       o enable-crypto-mdebug and enable-crypto-mdebug-backtrace were mostly
         disabled; the project uses address sanitize/leak-detect instead.
       o Added OSSL_SERIALIZER, a generic serializer API.
@@ -28,6 +35,8 @@
       o All of the low level MD2, MD4, MD5, MDC2, RIPEMD160, SHA1, SHA224,
         SHA256, SHA384, SHA512 and Whirlpool digest functions have been
         deprecated.
+      o All of the low level AES, Blowfish, Camellia, CAST, DES, IDEA, RC2,
+        RC4, RC5 and SEED cipher functions have been deprecated.
 
   Major changes between OpenSSL 1.1.1 and OpenSSL 1.1.1a [20 Nov 2018]