doc update

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

diff --git a/NEWS b/NEWS
index 7d0475de9418ec6054b8f42625f21e830e8c4e18..415e1967ed20350633231ed8123a22ac7a8b07f5 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -37,6 +37,7 @@ See the end for copying conditions.
        multiple keys are supplied, RSA-PSS keys are preferred over RSA for RSA-PSS
        TLS signatures, to contain risks of cross-protocol attacks between the algorithms.
      * RSA-PSS key conversion to RSA PKCS#1 form (certtool --to-rsa)
+   Note that RSA-PSS signatures with SHA1 are (intentionally) not supported.
 
 ** libgnutls: Added support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17.  The feature includes: