From: Eugene Syromiatnikov Date: Sun, 5 Apr 2026 11:20:41 +0000 (+0200) Subject: CHANGES.md: move SSL_{add,set}1_{dnsname,ipaddr} entry to 4.0 section X-Git-Tag: openssl-4.0.0~31 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c1af6b4391de6ec5b502d62f5dbb4bfaa478b26e;p=thirdparty%2Fopenssl.git CHANGES.md: move SSL_{add,set}1_{dnsname,ipaddr} entry to 4.0 section Also reword it to match the style of other entries. Complements: cb1645e83bd9 "Add a changes entry" Signed-off-by: Eugene Syromiatnikov Reviewed-by: Paul Yang Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Wed Apr 8 10:00:06 2026 (Merged from https://github.com/openssl/openssl/pull/30686) (cherry picked from commit 148f29855cc81560b4a402a93fb5318f7f2581e9) --- diff --git a/CHANGES.md b/CHANGES.md index 06b96d97dc8..f6b99ec0a0e 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -151,6 +151,15 @@ OpenSSL Releases *Bob Beck* + * Added `SSL_add1_dnsname()`, `SSL_set1_dnsname()`, `SSL_add1_ipaddr()`, + and `SSL_set1_ipaddr()` functions as a replacement for `SSL_add1_host()` + and `SSL_set1_host()` that are deprecated now. The new replacement API + functions was added to support checking multiple names against a certificate + with `X509_VERIFY_PARAM`. See `X509_VERIFY_PARAM_set_flags(3)` for full + details. + + *Bob Beck* + * Added `SSL_CTX_get0_alpn_protos()` and `SSL_get0_alpn_protos()` functions. *Daniel Kubec* @@ -944,13 +953,6 @@ OpenSSL 3.6 *Dimitri John Ledkov* - * `SSL_add1_host()` and `SSL_set1_host()` were deprecated. The new replacement functions - `SSL_add1_dnsname()`, `SSL_set1_dnsname()`, `SSL_add1_ipaddr()`, and `SSL_set1_ipaddr()` were added. - API was added to support checking multiple names against a certificate with - `X509_VERIFY_PARAM`. See `X509_VERIFY_PARAM_set_flags(3)` for full details. - - *Bob Beck* - * Added `X509_CRL_get0_tbs_sigalg()` accessor for the signature `AlgorithmIdentifier` inside CRL's `TBSCertList`.