Call OCSP Stapling callback after ciphersuite has been chosen, so the

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index a39ad94410b88407a21299f92596bdbe685a6bc2..9cb17781abe283b9185529698b32068479c21196 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -346,6 +346,12 @@
 
  Changes between 1.0.1 and 1.0.2 [xx XXX xxxx]
 
+  *) Call OCSP Stapling callback after ciphersuite has been chosen, so
+     the right response is stapled. Also change SSL_get_certificate()
+     so it returns the certificate actually sent.
+     See http://rt.openssl.org/Ticket/Display.html?id=2836.
+     [Rob Stradling <rob.stradling@comodo.com>]
+
   *) Support for linux-x32, ILP32 environment in x86_64 framework.
      [Andy Polyakov]