Allow CRLs to be passed into X509_STORE_CTX. This is useful when the

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index b65a37aa79126fd5f533c99ae0597d91404d54a9..c5c2ebba9ba266ef9ba0a06cdf3c60a553f734bd 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,18 @@
 
  Changes between 0.9.7c and 0.9.8  [xx XXX xxxx]
 
+  *) Add a local set of CRLs that can be used by X509_verify_cert() as well
+     as looking them up. This is useful when the verified structure may contain
+     CRLs, for example PKCS#7 signedData. Modify PKCS7_verify() to use any CRLs
+     present unless the new PKCS7_NO_CRL flag is asserted.
+     [Steve Henson]
+
+  *) Extend ASN1 oid configuration module. It now additionally accepts the
+     syntax:
+
+     shortName = some long name, 1.2.3.4
+     [Steve Henson]
+
   *) Reimplemented the BN_CTX implementation. There is now no more static
      limitation on the number of variables it can handle nor the depth of the
      "stack" handling for BN_CTX_start()/BN_CTX_end() pairs. The stack