X-Git-Url: http://git.indexdata.com/?a=blobdiff_plain;f=NEWS;h=aa92ec3d7be16795f8b57bfbeaba2410a5f083fd;hb=725fc033b729b22a1e0cfba614192b6fbfaeda4f;hp=a460ce3056595ee84e010bc465575c4d9904f1d6;hpb=e77fbf07b0a8d31165e643565d18e9ac71c322d6;p=yaz-moved-to-github.git

diff --git a/NEWS b/NEWS
index a460ce3..aa92ec3 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,30 @@
 Possible compatibility problems with earlier versions marked with '*'.
 
+Add autoconf m4 macro YAZ_DOC for YAZ documentation setup (docbook).
+
+SSL comstack now uses yaz.pem certificate file on server side
+by default. Certificate filename can be configured by calling
+comstack function cs_set_ssl_cert before cs_bind is used.
+
+Fix bug regarding multiple calls to ZOOM_connection_connect.
+
+Implement cs_set_ssl_ctx which sets SSL_CTX for SSL comstack.
+
+Do not create SSL_CTX in cs_create (ssl_type). Create in tcpip_bind,
+tcpip_rcvconnect instead. This allows user to set custom SSL_CTX.
+
+ZOOM now allows inspection of X509 peer certificate for verification.
+The X509 buffer is retrived by reading ZOOM option "sslPeerCert".
+
+Removed libyazssl.la. When SSL is enabled, libyaz.la has SSL support and
+all programs have too (yaz-ztest, yaz-client, zoom..). May not be
+as "modular" but it simplifies things.
+
+Added cs_get_peer_certificate to that returns peer X509 PEM.
+
+Added cs_get_ssl that returns SSL handle (SSL *) for SSL comstack; returns
+NULL if SSL is unavailable.
+
 Documentation about MARC decoding tools.
 
 Fix --disable-tcpd to really disable tcpd. Patch by Robin H. Johnson.