summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@redhat.com>2016-05-10 15:13:51 +0200
committerNikos Mavrogiannopoulos <nmav@redhat.com>2016-05-10 15:15:16 +0200
commit938dd1ee7a8c935fda3a40d9aa92af65127d67e0 (patch)
tree81eda9fade8f45e8d296d6e6a52c5f7a4fe924f2
parent99b3087e4f972fd0dd3a2ae641eded5c024f3a16 (diff)
downloadgnutls-938dd1ee7a8c935fda3a40d9aa92af65127d67e0.tar.gz
doc update
-rw-r--r--NEWS7
1 files changed, 7 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index ad28189642..eac63029b2 100644
--- a/NEWS
+++ b/NEWS
@@ -19,6 +19,13 @@ See the end for copying conditions.
** libgnutls: gnutls_pkcs11_obj_import_url() and gnutls_x509_crt_import_pkcs11_url()
can accept the GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT flag.
+** libgnutls: gnutls_certificate_set_key() was enhanced to import the DNS
+ name of the certificates if the provided names are NULL.
+
+** libgnutls: when importing the certificate names at the
+ gnutls_certificate_set* functions, only consider the CN as a fallback
+ if DNS names are provided via the alternative name extension.
+
** ocsptool: use HTTP/1.0 for requests. This avoids issue with servers
serving chunk encoding which ocsptool doesn't support. Reported by Thomas
Klute.