- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
diff --git a/ChangeLog b/ChangeLog index da8c5b5..3622d08 100644 --- a/ChangeLog +++ b/ChangeLog
@@ -24,6 +24,8 @@ * Fixed const-correctness mpi_get_bit() * Documentation for mpi_lsb() and mpi_msb() * Moved out_msg to out_hdr + 32 to support hardware acceleration + * Changed certificate verify behaviour to comply with RFC 6125 section 6.3 + to not match CN if subjectAltName extension is present. Bugfix * Fixed handling error in mpi_cmp_mpi() on longer B values (found by