Mention switch to the legacy verifier in ChangeLogv3.3.2

1 files changed, 5 insertions, 2 deletions

diff --git a/ChangeLog b/ChangeLog
index 5d7bcb4..e44b118 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -32,8 +32,9 @@ LibreSSL Portable Release Notes:
 
         * This release adds support for DTLSv1.2 and continues the rewrite
           of the record layer for the legacy stack. Numerous bugs and
-          interoperability issues were fixed in the new verifier. The
-          OpenSSL 1.1 TLSv1.3 API is not yet available.
+          interoperability issues were fixed in the new verifier. A few bugs
+          and incompatibilities remain, so this release uses the old verifier
+          by default. The OpenSSL 1.1 TLSv1.3 API is not yet available.
 
         * Switch finish{,_peer}_md_len from an int to a size_t.
 
@@ -301,6 +302,8 @@ LibreSSL Portable Release Notes:
           SSL_R_ error codes to identify that they are dealing with a self
           signed cert.
 
+        * Switch to the legacy verifier for the stable release.
+
         * Provide SSL_use_certificate_chain_file(3).
 
         * Provide SSL_set_hostflags(3) and SSL_get0_peername(3).