Add a changes entry

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
MergeDate: Tue Feb 24 14:04:47 2026
(Merged from https://github.com/openssl/openssl/pull/29612)

diff --git a/CHANGES.md b/CHANGES.md
index 7d1ec712217a9a73b54b9d437e6873a6a902fbc4..4a9c0642c8ef11f7e423cbe3cf6f2c745d78eeed 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -519,6 +519,13 @@ OpenSSL 3.6
 
    *Dimitri John Ledkov*
 
+ * SSL_add1_host and SSL_set1_host were deprecated. The new replacement functions
+   SSL_add1_dnsname, SSL_set1_dnsname, SSL_add1_ipaddr, and SSL_set1_ipaddr were added.
+   API was added to support checking multiple names against a certificate with
+   X509_VERIFY_PARAM.  See X509_VERIFY_PARAM_set_flags(3) for full details.
+
+   * Bob Beck *
+
  * Added `X509_CRL_get0_tbs_sigalg()` accessor for the signature
    `AlgorithmIdentifier` inside CRL's `TBSCertList`.