summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@redhat.com>2018-01-17 09:26:09 +0100
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2018-02-04 10:10:22 +0100
commitaffb25fbc86fe400519d3c0ccb4fc41e209d6e4d (patch)
treead18b2adf4c58168c56acf5c516395632b20be3f
parent3a51b93c37f9e8eed4db04219b70ed82ed5fb81d (diff)
downloadgnutls-tmp-gnutls_3_3_x-use-strict-der.tar.gz
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
-rw-r--r--NEWS4
1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 21ba9b3a39..2692802421 100644
--- a/NEWS
+++ b/NEWS
@@ -15,6 +15,10 @@ See the end for copying conditions.
is deprecated and on our use we don't need readdir() to be thread safe
(which it is in most common platforms).
+** libgnutls: require strict DER encoding for certificates, OCSP requests, private
+ keys, CRLs and certificate requests. This backports the already default behavior
+ from the 3.5.x branch, in order to reduce issues due to the complexity of BER rules.
+
** p11tool: Fixed issue preventing the deletion of objects in batch mode.
** p11tool: Mark all generated objects as sensitive by default.