Map new X509 verification errors to alert codes (Tom Wu <tom@arcot.com>).

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index ba42e28efd6bd6700b19dff8a3e7f772c0d797ec..722c4d8854fd0c79a06cc9f356b4618f670c442a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -19,8 +19,9 @@
        extracted before the specific public key.
      [Nils Larsch <nla@trustcenter.de>]
 
-  *) Include some named elliptic curves, and add OIDs from X9.62 and SECG.
-     The curves can be obtained from the new functions
+  *) Include some named elliptic curves, and add OIDs from X9.62,
+     SECG, and WAP/WTLS.  The curves can be obtained from the new
+     functions
           EC_GROUP_new_by_nid()
           EC_GROUP_new_by_name()
      Also add a 'nid' field to EC_GROUP objects, which can be accessed
@@ -40,6 +41,10 @@
          *) applies to 0.9.6a ... 0.9.6d and 0.9.7
          +) applies to 0.9.7 only
 
+  *) Map new X509 verification errors to alerts. Discovered and submitted by
+     Tom Wu <tom@arcot.com>.
+     [Lutz Jaenicke]
+
   *) Fix ssl3_pending() (ssl/s3_lib.c) to prevent SSL_pending() from
      returning non-zero before the data has been completely received
      when using non-blocking I/O.