From: Amos Jeffries <squid3@treenet.co.nz>
Date: Thu, 28 Jan 2016 11:14:52 +0000 (+1300)
Subject: Releae notes update for --enable-security-certv-helpers and cert_valid.pl changes
X-Git-Tag: SQUID_4_0_5~17^2~5
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e90ce3d174da59d7dcf6234d58c557c1984d5e8d;p=thirdparty%2Fsquid.git

Releae notes update for --enable-security-certv-helpers and cert_valid.pl changes
---

diff --git a/doc/release-notes/release-4.sgml b/doc/release-notes/release-4.sgml
index 60550171c1..0440f72eb8 100644
--- a/doc/release-notes/release-4.sgml
+++ b/doc/release-notes/release-4.sgml
@@ -44,6 +44,7 @@ The Squid-4 change history can be <url url="http://www.squid-cache.org/Versions/
 	<item>Configurable helper queue size
 	<item>Helper concurrency channels changes
 	<item>SSL support removal
+	<item>cert_valid.pl helper renamed
 	<item>MSNT-multi-domain helper removal
 	<item>Secure ICAP
 	<item>Improved SMP support
@@ -99,6 +100,16 @@ Most user-facing changes are reflected in squid.conf (see below).
    behaviour explicitly if needed.
 
 
+<sect1>cert_valid.pl helper renamed
+<p>The <em>cert_valid.pl</em> testing helper has been renamed to
+   <em>security_fake_certv</em>, reflecting the Squid helper naming schema
+   and that it does not actually perform any certificate checks.
+
+<p>This helper is also now built and installed by default. It is written in Perl
+   so does not require OpenSSL dependencies for installation. But does use the
+   Perl OpenSSL crypto modules, so requires it for execution.
+
+
 <sect1>MSNT-multi-domain helper removal
 <p>The <em>basic_msnt_multi_domain_auth</em> helper has been removed. The
    <em>basic_smb_lm_auth</em> helper performs the same actions without extra
@@ -322,6 +333,12 @@ This section gives an account of those changes in three categories:
 <sect1>New options<label id="newoptions">
 <p>
 <descrip>
+	<tag>--enable-security-certv-helpers</tag>
+	<p>New directive to control which TLS/SSL certificate verification helpers
+	   are built and installed.
+	<p>One <em>fake</em> helper that it does not actually perform any
+	   certificate checks is provided for testing and example code for writing
+	   custom helpers.
 
 </descrip>