From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Fri, 27 Nov 2009 22:48:15 +0000 (+0200)
Subject: Documented certtool's certificate request generation fix.
X-Git-Tag: gnutls_2_9_10~201
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=02ee5842f8f5f37ee93e258d5edfc2560b00ac2c;p=thirdparty%2Fgnutls.git

Documented certtool's certificate request generation fix.
---

diff --git a/NEWS b/NEWS
index 9d085712db..cd44a42b4d 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,14 @@ See the end for copying conditions.
 
 * Version 2.9.10 (unreleased)
 
+** certtool: Corrected two issues that affected certificate request generation.
+(1) Null padding is added on integers (found thanks to Wilankar Trupti),
+(2) In optional SignatureAlgorithm parameters field for DSA keys the DSA
+parameters were added. Those were rejected by Verisign. Gnutls no longer adds 
+those parameters there since other implementations don't do either and having 
+them does not seem to offer anything (anyway you need the signer's certificate
+to verify thus public key will be available). Found thanks to Boyan Kasarov.
+
 ** certtool: Allow exporting of Certificate requests on DER format.
 
 ** certtool: New option --no-crq-extensions to avoid extensions in CSRs.