1 files changed, 3 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index 5336146..b6f8669 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -33,6 +33,9 @@ LibreSSL Portable Release Notes:
        * A stack overread could occur when checking X.509 name constraints.
          From GoldBinocle on GitHub.
+        * Enable X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier.
+          This compensates for the expiry of the DST Root X3 certificate.
 3.2.6 - Security fix
        * In LibreSSL, printing a certificate can result in a crash in

diff --git a/ChangeLog b/ChangeLog index 5336146..b6f8669 100644 --- a/ChangeLog +++ b/ChangeLog
@@ -33,6 +33,9 @@ LibreSSL Portable Release Notes:
33	* A stack overread could occur when checking X.509 name constraints.	33	* A stack overread could occur when checking X.509 name constraints.
34	From GoldBinocle on GitHub.	34	From GoldBinocle on GitHub.
35		35
		36	* Enable X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier.
		37	This compensates for the expiry of the DST Root X3 certificate.
		38
36	3.2.6 - Security fix	39	3.2.6 - Security fix
37		40
38	* In LibreSSL, printing a certificate can result in a crash in	41	* In LibreSSL, printing a certificate can result in a crash in