X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=CHANGES;h=dcbe2916c481a9f1231939d967f641eb7679aa7f;hp=415260fe2fc382029afd15cdc9ac4aa57f666fd5;hb=b38fa9855f65477fb4a6ef943276be8237468e3b;hpb=3e8fcd3d1f9343707e1c4f9e8d5deb32bfac6538

diff --git a/CHANGES b/CHANGES
index 415260fe2f..dcbe2916c4 100644
--- a/CHANGES
+++ b/CHANGES
@@ -9,8 +9,22 @@
 
  Changes between 1.1.0g and 1.1.1 [xx XXX xxxx]
 
-  *) Added support for X448 and Ed448. Currently this is only supported in
-     libcrypto (not libssl). Heavily based on original work by Mike Hamburg.
+  *) On POSIX (BSD, Linux, ...) systems the ocsp(1) command running
+     in responder mode now supports the new "-multi" option, which
+     spawns the specified number of child processes to handle OCSP
+     requests.  The "-timeout" option now also limits the OCSP
+     responder's patience to wait to receive the full client request
+     on a newly accepted connection. Child processes are respawned
+     as needed, and the CA index file is automatically reloaded
+     when changed.  This makes it possible to run the "ocsp" responder
+     as a long-running service, making the OpenSSL CA somewhat more
+     feature-complete.  In this mode, most diagnostic messages logged
+     after entering the event loop are logged via syslog(3) rather than
+     written to stderr.
+     [Viktor Dukhovni]
+
+  *) Added support for X448 and Ed448. Heavily based on original work by
+     Mike Hamburg.
      [Matt Caswell]
 
   *) Extend OSSL_STORE with capabilities to search and to narrow the set of