Documented certtool's certificate request generation fix.

diff --git a/NEWS b/NEWS
index 9d085712db7fea4fc8f191c8f61960e918725674..cd44a42b4daae855017b69fdf74b54dcf9541e86 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,14 @@ See the end for copying conditions.
 
 * Version 2.9.10 (unreleased)
 
+** certtool: Corrected two issues that affected certificate request generation.
+(1) Null padding is added on integers (found thanks to Wilankar Trupti),
+(2) In optional SignatureAlgorithm parameters field for DSA keys the DSA
+parameters were added. Those were rejected by Verisign. Gnutls no longer adds 
+those parameters there since other implementations don't do either and having 
+them does not seem to offer anything (anyway you need the signer's certificate
+to verify thus public key will be available). Found thanks to Boyan Kasarov.
+
 ** certtool: Allow exporting of Certificate requests on DER format.
 
 ** certtool: New option --no-crq-extensions to avoid extensions in CSRs.