From: Dr. David von Oheimb Date: Tue, 2 Jun 2026 19:44:08 +0000 (+0200) Subject: add HISTORY and CHANGES.md entry for OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR... X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cdad6573efed9d6e1612b1fd222a3b2ae598e07a;p=thirdparty%2Fopenssl.git add HISTORY and CHANGES.md entry for OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR introduced in 4.0 Complements: 21722fe5545c "OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR: use new TA(s) for whole transaction (also pkiconf); update doc" Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Thu Jun 11 14:56:47 2026 (Merged from https://github.com/openssl/openssl/pull/29043) --- diff --git a/CHANGES.md b/CHANGES.md index eaeef669351..4e33d004731 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -599,6 +599,13 @@ OpenSSL Releases *Bob Beck* + * Added `OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR` option for `OSSL_CMP_CTX` + and a corresponding `-ta_in_ip_extracert` option for the `openssl cmp` command. + + This work was sponsored by Siemens AG. + + *David von Oheimb* + * `X509_ALGOR_set_md()` function now returns a value indicating success or failure. diff --git a/doc/man3/OSSL_CMP_CTX_new.pod b/doc/man3/OSSL_CMP_CTX_new.pod index 415a80161ba..146bdbd0649 100644 --- a/doc/man3/OSSL_CMP_CTX_new.pod +++ b/doc/man3/OSSL_CMP_CTX_new.pod @@ -894,6 +894,8 @@ OSSL_CMP_CTX_get0_geninfo_ITAVs() were added in OpenSSL 3.3. Support for central key generation, requested via B, was added in OpenSSL 3.5. +The B option was added in OpenSSL 4.0. + =head1 COPYRIGHT Copyright 2007-2025 The OpenSSL Project Authors. All Rights Reserved.