doc update

diff --git a/NEWS b/NEWS
index 9579908e0c023a71d4474c907fdee78355633bf1..3c71e3d8b7fffac7fa0d5fe22071df1ebe40c728 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -31,6 +31,10 @@ See the end for copying conditions.
 ** libgnutls: GNUTLS_CRT_PRINT_ONELINE flag on gnutls_x509_crt_print()
    will print the SHA256 key-ID instead of a certificate fingerprint.
 
+** libgnutls: enhance the PKCS#7 verification capabilities. In the case
+   signers that are not discoverable using the trust list or input, use
+   the stored list as pool to generate a trusted chain to the signer.
+
 ** certtool: Include the SHA-256 variant of key ID in --certificate-info
    options.