Add a changes entry for the x509 time function changes

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
MergeDate: Sun Feb 22 17:49:25 2026
(Merged from https://github.com/openssl/openssl/pull/30098)

diff --git a/CHANGES.md b/CHANGES.md
index 9c26cf73f94b48bc07ed8626e76488c500dc2c30..3fb60df8daa90ca1c31a72ee7cf35c6bec7d2452 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -320,6 +320,15 @@ OpenSSL 4.0
 
    *Stephen Farrell* (with much support from *Matt Caswell* and *Tomáš Mráz*)
 
+ * X509_cmp_time, X509_cmp_current_time, and X509_cmp_timeframe have
+   had documentation added, and have then been deprecated.  A new
+   function, X509_check_certificate_times has been added, as well as
+   the <openssl/posix_time.h> interface from BoringSSL/LibreSSL. For
+   details of these functions and non-deprecated replacement
+   strategies, see X509_check_certificate_times(3).
+
+   * Bob Beck *
+
 OpenSSL 3.6
 -----------