From: kovan <xaum.io@gmail.com>
Date: Mon, 2 Feb 2026 10:22:44 +0000 (+0100)
Subject: doc: add CHANGES.md entry for const-correct X509_ATTRIBUTE functions
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4cf52a2feda838b99a9255417844fbd20420159d;p=thirdparty%2Fopenssl.git

doc: add CHANGES.md entry for const-correct X509_ATTRIBUTE functions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
MergeDate: Fri Feb 13 14:46:30 2026
(Merged from https://github.com/openssl/openssl/pull/29813)
---

diff --git a/CHANGES.md b/CHANGES.md
index 98e78e5d10a..a8682317e53 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -47,6 +47,15 @@ OpenSSL 4.0
 
    *Bob Beck*
 
+ * Made X509_ATTRIBUTE accessor functions const-correct. The functions
+   X509_ATTRIBUTE_get0_object(), X509_ATTRIBUTE_get0_type(), and
+   X509_ATTRIBUTE_get0_data() now accept `const X509_ATTRIBUTE *` and
+   return const pointers. Related PKCS12 functions PKCS12_get_attr_gen(),
+   PKCS12_get_attr(), and PKCS8_get_attr() have also been updated to
+   return `const ASN1_TYPE *`.
+
+   *kovan*
+
  * Added CSHAKE as per [SP 800-185]
 
    *Shane Lontis*