dd autoconf m4 macro YAZ_DOC for YAZ documentation setup (docbook).

[yaz-moved-to-github.git] / NEWS

diff --git a/NEWS b/NEWS
index a460ce3..aa92ec3 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,30 @@
 Possible compatibility problems with earlier versions marked with '*'.
 
+Add autoconf m4 macro YAZ_DOC for YAZ documentation setup (docbook).
+
+SSL comstack now uses yaz.pem certificate file on server side
+by default. Certificate filename can be configured by calling
+comstack function cs_set_ssl_cert before cs_bind is used.
+
+Fix bug regarding multiple calls to ZOOM_connection_connect.
+
+Implement cs_set_ssl_ctx which sets SSL_CTX for SSL comstack.
+
+Do not create SSL_CTX in cs_create (ssl_type). Create in tcpip_bind,
+tcpip_rcvconnect instead. This allows user to set custom SSL_CTX.
+
+ZOOM now allows inspection of X509 peer certificate for verification.
+The X509 buffer is retrived by reading ZOOM option "sslPeerCert".
+
+Removed libyazssl.la. When SSL is enabled, libyaz.la has SSL support and
+all programs have too (yaz-ztest, yaz-client, zoom..). May not be
+as "modular" but it simplifies things.
+
+Added cs_get_peer_certificate to that returns peer X509 PEM.
+
+Added cs_get_ssl that returns SSL handle (SSL *) for SSL comstack; returns
+NULL if SSL is unavailable.
+
 Documentation about MARC decoding tools.
 
 Fix --disable-tcpd to really disable tcpd. Patch by Robin H. Johnson.