** libdane: Added. It is a library to provide DANE with DNSSEC certificate
verification.
-** certtool: The --dane-rr option generates DANE Resource Records (RR).
+** certtool: The --dane-rr option generates DANE TLSA Resource Records (RR).
** API and ABI modifications:
gnutls_certificate_set_ocsp_status_request_function: Added
$ certtool --verify-crl --load-ca-certificate x509-ca.pem < crl.pem
@end example
-@subheading DANE RR generation
-To create a DANE resource record for a CA signed certificate use the following commands.
+@subheading DANE TLSA RR generation
+To create a DANE TLSA resource record for a CA signed certificate use the following commands.
@example
$ certtool --dane-rr --dane-host www.example.com --load-certificate cert.pem