Tidy up and fix verify callbacks to avoid structure dereference, use of

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index fe98cddc6910c7955253fdc05622e8541a7eec1f..d43e499aedd19e47eea2d7ea096d59c63fecc480 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,11 @@
 
  Changes between 0.9.8k and 1.0  [xx XXX xxxx]
 
+  *) Update verify callback code in apps/s_cb.c and apps/verify.c, it
+     needlessly dereferenced structures, used obsolete functions and
+     didn't handle all updated verify codes correctly.
+     [Steve Henson]
+
   *) Delete MD2 from algorithm tables. This follows the recommendation in 
      several standards that it is not used in new applications due to
      several cryptographic weaknesses. The algorithm is also disabled in