cert verify

2 files changed, 16 insertions, 3 deletions

diff --git a/CHANGES b/CHANGES
index ad260c3f8..b1a54fcf7 100644
--- a/CHANGES
+++ b/CHANGES
@@ -6,8 +6,20 @@
 
                                   Changelog
 
+Daniel (19 May 2004)
+- David Byron added test case 170 - this used to crash the previous version of 
+  curl.
+
 Daniel (17 May 2004)
-- All 191 test cases run through the torture test OK!
+- Peter Sylvester's patch that addresses two flaws in the peer certificate
+  name verification:
+  o when multiple common names are used (as in the curl tests), the last name
+    needs to be selected.
+  o allow comparing with encoded values, at least with BMP and ISO latin1
+    encoded T61strings.
+
+- All 191 test cases run through the torture test OK! 'make test-torture' is
+  now available in the root makefile (on configure-based environments).
 
 Daniel (14 May 2004)
 - With a slightly modified ftpserver.pl I've now run almost all tests through
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 61a7f780e..274ebc40d 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -21,7 +21,8 @@ This release includes the following changes:
 
 This release includes the following bugfixes:
 
- o allocation failures cause no leaks
+ o improved peer certificate name verification
+ o allocation failures cause no leaks nor crashes
  o the progress meter display now handles file sizes up to full 8 exabytes
    (which is as high a signed 64 bit number can reach)
  o general HTTP authentication improvements
@@ -44,6 +45,6 @@ This release would not have looked like this without help, code, reports and
 advice from friends like these:
 
  Gisle Vanem, Tommy Tam, Luca Altea, James Bursa, Mihai Ionescu, Michael
- Benedict, Andrés García, Joe Halpin, Seshubabu Pasam
+ Benedict, Andrés García, Joe Halpin, Seshubabu Pasam, Peter Sylvester
 
         Thanks! (and sorry if I forgot to mention someone)