add suite B chain validation flags and associated verify errors

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 08a67fbd1b48289ccb8c256d3ebfc92b4cad23f8..dafce7715ab336d88002a71db8d6f9f35c96799e 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -8,6 +8,10 @@
      OID NID.
      [Steve Henson]
 
+  *) New chain verification flags for Suite B levels of security. Check
+     algorithms are acceptable when flags are set in X509_verify_cert.
+     [Steve Henson]
+
   *) Make tls1_check_chain return a set of flags indicating checks passed
      by a certificate chain. Add additional tests to handle client
      certificates: checks for matching certificate type and issuer name