diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2008-08-29 11:37:21 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2008-08-29 11:37:21 +0000 |
commit | 4b96839f069a2c9fef3d1feffca2880361181544 (patch) | |
tree | 629a9c6b65416dce84e31731bcc9a24f77dae7db /CHANGES | |
parent | 249a77f5fb6407185e0a6ad44cd88eda2b6f8946 (diff) |
Add support for CRLs partitioned by reason code.
Tidy CRL scoring system.
Add new CRL path validation error.
Diffstat (limited to 'CHANGES')
-rw-r--r-- | CHANGES | 14 |
1 files changed, 13 insertions, 1 deletions
@@ -4,6 +4,18 @@ Changes between 0.9.8i and 0.9.9 [xx XXX xxxx] + *) Support for CRLs partitioned by reason code. Reorganise CRL processing + code and add additional score elements. Validate alternate CRL paths + as part of the CRL checking and indicate a new error "CRL path validation + error" in this case. Applications wanting additional details can use + the verify callback and check the new "parent" field. If this is not + NULL CRL path validation is taking place. Existing applications wont + see this because it requires extended CRL support which is off by + default. + + This work was sponsored by Google. + [Steve Henson] + *) Support for freshest CRL extension. This work was sponsored by Google. @@ -12,7 +24,7 @@ *) Initial indirect CRL support. Currently only supported in the CRLs passed directly and not via lookup. Process certificate issuer CRL entry extension and lookup CRL entries by bother issuer name - and serial number. Check and proces CRL issuer entry in IDP extension. + and serial number. Check and process CRL issuer entry in IDP extension. This work was sponsored by Google. [Steve Henson] |