From 0511a2b6318c72e0bf99456dc9234950e9188cf6 Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos Date: Mon, 25 Nov 2019 22:36:22 +0100 Subject: certtool: always include the CRL distribution points on CAs Previously we would omit the CRL distribution points from a non-self signed CA certificate, even if contained in the template. Resolves: #765 Signed-off-by: Nikos Mavrogiannopoulos --- NEWS | 3 +++ 1 file changed, 3 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 56edace3aa..56866cf24f 100644 --- a/NEWS +++ b/NEWS @@ -15,6 +15,9 @@ See the end for copying conditions. ** libgnutls: Corrected issue with TLS 1.2 session ticket handling as client during resumption (#841). +** certtool: CRL distribution points will be set in CA certificates even when + non self-signed (#765). + ** gnutls-cli/serv: added raw public-key handling capabilities (RFC7250). Key material can be set via the --rawpkkeyfile and --rawpkfile flags. -- cgit v1.2.1