Changes between 1.0.x and 1.1.0 [xx XXX xxxx]
- *) New functions to set lookup_crls function and to retrieve
+ *) Make openssl verify return errors.
+ [Chris Palmer <palmer@google.com> and Ben Laurie]
+
+ *) Fix OCSP checking.
+ [Rob Stradling <rob.stradling@comodo.com> and Ben Laurie]
+
+ *) New option -crl_download in several openssl utilities to download CRLs
+ from CRLDP extension in certificates.
+ [Steve Henson]
+
+ *) Integrate hostname, email address and IP address checking with certificate
+ verification. New verify options supporting checking in opensl utility.
+ [Steve Henson]
+
+ *) New function X509_CRL_diff to generate a delta CRL from the difference
+ of two full CRLs. Add support to "crl" utility.
+ [Steve Henson]
+
+ *) New options -CRL and -CRLform for s_client and s_server for CRLs.
+ [Steve Henson]
+
+ *) Extend OCSP I/O functions so they can be used for simple general purpose
+ HTTP as well as OCSP. New wrapper function which can be used to download
+ CRLs using the OCSP API.
+ [Steve Henson]
+
+ *) New functions to set lookup_crls callback and to retrieve
X509_STORE from X509_STORE_CTX.
[Steve Henson]
[Steve Henson]
*) New functions to check a hostname email or IP address against a
- certificate. Add options to s_client, s_server and x509 utilities
- to print results of checks against a certificate.
+ certificate. Add options x509 utility to print results of checks against
+ a certificate.
[Steve Henson]
*) Add -rev test option to s_server to just reverse order of characters