X-Git-Url: https://git.librecmc.org/?a=blobdiff_plain;f=CHANGES;h=e770a240b7f0af5cae79448c8febd6910f939b0d;hb=c4e6fb15244e27f1e93df3f59fe37b59a784f5dc;hp=c4a7cb4fd14ff4f9a0116f4aaa443679640f8f7e;hpb=3bf15e2974f416cb970ef54fae0f600ec299000e;p=oweals%2Fopenssl.git

diff --git a/CHANGES b/CHANGES
index c4a7cb4fd1..e770a240b7 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,16 @@
 
  Changes between 1.0.x and 1.1.0  [xx XXX xxxx]
 
+  *) Make openssl verify return errors.
+     [Chris Palmer <palmer@google.com> and Ben Laurie]
+
+  *) Fix OCSP checking.
+     [Rob Stradling <rob.stradling@comodo.com> and Ben Laurie]
+
+  *) New option -crl_download in several openssl utilities to download CRLs
+     from CRLDP extension in certificates.
+     [Steve Henson]
+
   *) Integrate hostname, email address and IP address checking with certificate
      verification. New verify options supporting checking in opensl utility.
      [Steve Henson]
@@ -41,8 +51,8 @@
      [Steve Henson]
 
   *) New functions to check a hostname email or IP address against a
-     certificate. Add options to s_client, s_server and x509 utilities
-     to print results of checks against a certificate.
+     certificate. Add options x509 utility to print results of checks against
+     a certificate.
      [Steve Henson]
 
   *) Add -rev test option to s_server to just reverse order of characters