- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
diff --git a/ChangeLog b/ChangeLog
index da8c5b5..3622d08 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -24,6 +24,8 @@
* Fixed const-correctness mpi_get_bit()
* Documentation for mpi_lsb() and mpi_msb()
* Moved out_msg to out_hdr + 32 to support hardware acceleration
+ * Changed certificate verify behaviour to comply with RFC 6125 section 6.3
+ to not match CN if subjectAltName extension is present.
Bugfix
* Fixed handling error in mpi_cmp_mpi() on longer B values (found by