ENGINE_pkey_asn1_find_str(): don't assume an engine implements ASN1 method

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 5e6295c00fddb1d4d367305a609f3693ba3d8ab7..f17fbbf8371af19342de2d8957f66d0185b34987 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -7,7 +7,18 @@
  https://github.com/openssl/openssl/commits/ and pick the appropriate
  release branch.
 
- Changes between 1.0.2n and 1.0.2o [xx XXX xxxx]
+ Changes between 1.0.2o and 1.0.2p [xx XXX xxxx]
+
+  *) When unlocking a pass phrase protected PEM file or PKCS#8 container, we
+     now allow empty (zero character) pass phrases.
+     [Richard Levitte]
+
+  *) Certificate time validation (X509_cmp_time) enforces stricter
+     compliance with RFC 5280. Fractional seconds and timezone offsets
+     are no longer allowed.
+     [Emilia Käsper]
+
+ Changes between 1.0.2n and 1.0.2o [27 Mar 2018]
 
   *) Constructed ASN.1 types with a recursive definition could exceed the stack