This probably fixes a BN_rshift bug.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index ec5b7c4d807dccf6fe70edc15c8895da8aef2661..bd8e6da93e6887d4aba8fe45b52d84121fcd6857 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,17 @@
 
  Changes between 0.9.5a and 0.9.6  [xx XXX 2000]
 
+  *) The evp_local.h macros were using 'c.##kname' which resulted in
+     invalid expansion on some systems (SCO 5.0.5 for example).
+     Corrected to 'c.kname'.
+     [Phillip Porch <root@theporch.com>]
+
+  *) New X509_get1_email() and X509_REQ_get1_email() functions that return
+     a STACK of email addresses from a certificate or request, these look
+     in the subject name and the subject alternative name extensions and 
+     omit any duplicate addresses.
+     [Steve Henson]
+
   *) Re-implement BN_mod_exp2_mont using independent (and larger) windows.
      This makes DSA verification about 2 % faster.
      [Bodo Moeller]