===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus56.html,v
retrieving revision 1.32
retrieving revision 1.33
diff -c -r1.32 -r1.33
*** www/plus56.html 2021/09/19 19:22:17 1.32
--- www/plus56.html 2021/10/08 16:31:36 1.33
***************
*** 373,379 ****
Fixed version number processing in ssl(8) cms_sd_set_version() (PR #3249).
Removed rdist(1).
Avoid panic on alpha when using network card with a small number of tx descriptors per packet, a lot of memory, and a heavily fragmented packets.
! When looking for the issuer of a ssl(8) x509 certificate, only return an expired certificate if no valid certificates have been found (PR #3359).
In ssl(8) ssl3_get_client_key_exchange() parsing a GOST session key, invoke the regular ASN.1 parser (PR #3335).
Removed RFC4620 Node Information Query support from the kernel.
Made ssl(8) CMS_decrypt_set1_pkey() return an error if no recipient type matches, instead of returning a random key (PR #3348).
--- 373,379 ----
Fixed version number processing in ssl(8) cms_sd_set_version() (PR #3249).
Removed rdist(1).
Avoid panic on alpha when using network card with a small number of tx descriptors per packet, a lot of memory, and a heavily fragmented packets.
! When looking for the issuer of a ssl(8) X.509 certificate, only return an expired certificate if no valid certificates have been found (PR #3359).
In ssl(8) ssl3_get_client_key_exchange() parsing a GOST session key, invoke the regular ASN.1 parser (PR #3335).
Removed RFC4620 Node Information Query support from the kernel.
Made ssl(8) CMS_decrypt_set1_pkey() return an error if no recipient type matches, instead of returning a random key (PR #3348).
***************
*** 836,842 ****
Fixed segfault in makewhatis(8) -Q if the next .SH after .SH NAME does not have any arguments.
Backed out the previous ICMP simplifying diff from dhcpd(8), which caused livelocks.
Try postponed requests first, so iked(8) does in-order processing.
! Made iked(8) authentication work with X509 certificates not containing a subject-altname.
Removed the undocumented and ineffective ln(1) -F option.
Removed sysctl(8) {nd6_,}useloopback options.
--- 836,842 ----
Fixed segfault in makewhatis(8) -Q if the next .SH after .SH NAME does not have any arguments.
Backed out the previous ICMP simplifying diff from dhcpd(8), which caused livelocks.
Try postponed requests first, so iked(8) does in-order processing.
! Made iked(8) authentication work with X.509 certificates not containing a subject-altname.
Removed the undocumented and ineffective ln(1) -F option.
Removed sysctl(8) {nd6_,}useloopback options.