From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Thu, 2 Jan 2014 12:36:35 +0000 (+0100)
Subject: doc update
X-Git-Tag: gnutls_3_3_0pre0~380
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=7240d18eda244d02faee7b9a26c4f048fea5aa72;p=thirdparty%2Fgnutls.git

doc update
---

diff --git a/NEWS b/NEWS
index be0ef31390..8d992a74fd 100644
--- a/NEWS
+++ b/NEWS
@@ -46,6 +46,12 @@ option enables:
 
 ** libgnutls: Depend on p11-kit 0.19.1 or later.
 
+** libgnutls: When a PKCS #11 trust store is specified (e.g. using the
+configure option --with-default-trust-store-pkcs11), then the PKCS #11
+token is used on demand to obtain the trusted anchors, rather than
+preloading all trusted certificates. That allows CA certificate management
+to occur outside the process boundaries.
+
 ** API and ABI modifications:
 gnutls_privkey_generate: Added
 gnutls_fips140_mode_enabled: Added