CHANGES.md: move SSL_{add,set}1_{dnsname,ipaddr} entry to 4.0 section

Also reword it to match the style of other entries.

Complements: cb1645e83bd9 "Add a changes entry"
Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Wed Apr  8 10:00:06 2026
(Merged from https://github.com/openssl/openssl/pull/30686)

(cherry picked from commit 148f29855cc81560b4a402a93fb5318f7f2581e9)

diff --git a/CHANGES.md b/CHANGES.md
index 06b96d97dc8dcaeb62e3f920c74aefcf76a2ac11..f6b99ec0a0e41bcda22fbcfdaaf72f5dd2f6a2bc 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -151,6 +151,15 @@ OpenSSL Releases
 
    *Bob Beck*
 
+ * Added `SSL_add1_dnsname()`, `SSL_set1_dnsname()`, `SSL_add1_ipaddr()`,
+   and `SSL_set1_ipaddr()` functions as a replacement for `SSL_add1_host()`
+   and `SSL_set1_host()` that are deprecated now.  The new replacement API
+   functions was added to support checking multiple names against a certificate
+   with `X509_VERIFY_PARAM`.  See `X509_VERIFY_PARAM_set_flags(3)` for full
+   details.
+
+   *Bob Beck*
+
  * Added `SSL_CTX_get0_alpn_protos()` and `SSL_get0_alpn_protos()` functions.
 
    *Daniel Kubec*
@@ -944,13 +953,6 @@ OpenSSL 3.6
 
    *Dimitri John Ledkov*
 
- * `SSL_add1_host()` and `SSL_set1_host()` were deprecated. The new replacement functions
-   `SSL_add1_dnsname()`, `SSL_set1_dnsname()`, `SSL_add1_ipaddr()`, and `SSL_set1_ipaddr()` were added.
-   API was added to support checking multiple names against a certificate with
-   `X509_VERIFY_PARAM`.  See `X509_VERIFY_PARAM_set_flags(3)` for full details.
-
-   *Bob Beck*
-
  * Added `X509_CRL_get0_tbs_sigalg()` accessor for the signature
    `AlgorithmIdentifier` inside CRL's `TBSCertList`.