diff options
author | Daiki Ueno <ueno@gnu.org> | 2021-04-28 11:04:20 +0200 |
---|---|---|
committer | Daiki Ueno <ueno@gnu.org> | 2021-04-28 15:23:49 +0200 |
commit | 46b739ac6d4b31a351b8a18af64baf10cc4a555c (patch) | |
tree | 511dbe30e08f23b3587b24a6953c471bf72fe3ca /NEWS | |
parent | a111a76d190af22bc54c3a5242d9ee65f1357d4a (diff) | |
download | gnutls-46b739ac6d4b31a351b8a18af64baf10cc4a555c.tar.gz |
certtool: don't copy CRL distribution point from CA cert
Suggested by Thomas Karlsson in:
https://gitlab.com/gnutls/gnutls/-/issues/1126
While this changes the default behavior, CDP can always be set through
the template or interactive input.
Signed-off-by: Daiki Ueno <ueno@gnu.org>
Diffstat (limited to 'NEWS')
-rw-r--r-- | NEWS | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -19,6 +19,9 @@ See the end for copying conditions. benefit of 0-RTT, but also works under certain assumptions hold (e.g., the same ciphersuite is selected in initial and resumption handshake) (#1146). +** certtool: When signing a CSR, CRL distribution point (CDP) is no longer + copied from the signing CA by default (#1126). + * Version 3.7.1 (released 2021-03-10) ** libgnutls: Fixed potential use-after-free in sending "key_share" |