summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2016-09-05 18:16:57 +0200
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2016-09-05 18:16:57 +0200
commite11ad053957a0fe0349d24c7d251ac3e2f4bfe1e (patch)
treee122b62656052a32ce0c35ea3b0ab3fc7adc7817
parent8b043c4d097445d85f951416ceada289e2b74c11 (diff)
downloadgnutls-e11ad053957a0fe0349d24c7d251ac3e2f4bfe1e.tar.gz
doc update
-rw-r--r--NEWS4
1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 6f56de1af8..9d97e74c82 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,10 @@ See the end for copying conditions.
* Version 3.5.4 (unreleased)
+** libgnutls: Corrected the comparison of the serial size in OCSP response.
+ Previously the OCSP certificate check wouldn't verify the serial length
+ and could succeed in cases it shouldn't. Reported by Stefan Buehler.
+
** libgnutls: Added support for IP name constraints. Patch by Martin Ukrop.
** libgnutls: Added support for decrypting PKCS#8 files which use HMAC-SHA256