The encoding of negative ASN1 INTEGERs and the conversion of BNs to negative

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 1bd0fc234fc3652462d944f7dab1b7956567e7a6..b72f682386a11d54f0b0bfb6fa3d9dfbd962ed00 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -10,6 +10,12 @@
                                    [23-Dec-1998] down below; but in later
                                    versions, these hyphens are gone.]
 
+  *) Fix the encoding and decoding of negative ASN1 INTEGERS and conversion
+     to and from BNs: it was completely broken. New compilation option
+     NEG_PUBKEY_BUG to allow for some broken certificates that encode public
+     key elements as negative integers.
+     [Steve Henson]
+
   *) Reorganize and speed up MD5.
      [Andy Polyakov <appro@fy.chalmers.se>]