Update NEWS and UPGRADING for the OpenSSL ext CMS addition

diff --git a/NEWS b/NEWS
index c4eb3fdbadc6006eee326ca0cb17e017b9d24a91..1fce85637ed48c9ed51c3d8bf66027bdfde74d70 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -102,6 +102,9 @@ PHP                                                                        NEWS
   . Fixed bug #79665 (ini_get() and opcache_get_configuration() inconsistency).
     (cmb)
 
+- OpenSSL:
+  . Added Cryptographic Message Syntax (CMS) support. (Eliot Lear)
+
 - PCRE:
   . Don't ignore invalid escape sequences. (sjon)
 

diff --git a/UPGRADING b/UPGRADING
index f7f4344c6e75674a2157d3b2ce0384ca0f127461..b345098b57d09a69e114d4b2ec87e45fc21bac0d 100644 (file)
--- a/UPGRADING
+++ b/UPGRADING
@@ -546,6 +546,13 @@ PHP 8.0 UPGRADE NOTES
     compile-time warnings and replay them on the next include, even if it is
     served from cache.
 
+- OpenSSL:
+  . Added Cryptographic Message Syntax (CMS) (RFC 5652) support composed of
+    functions for encryption, decryption, signing, verifying and reading. The
+    API is similar to the API for PKCS #7 functions with an addition of new
+    encoding constants: OPENSSL_ENCODING_DER, OPENSSL_ENCODING_SMIME and
+    OPENSSL_ENCODING_PEM.
+
 - Standard:
   . printf() and friends how support the %h and %H format specifiers. These
     are the same as %g and %G, but always use "." as the decimal separator,
@@ -650,6 +657,18 @@ PHP 8.0 UPGRADE NOTES
   . Added get_resource_id($resource) function, which returns the same value as
     (int) $resource. It provides the same functionality under a clearer API.
 
+- OpenSSL:
+  . Added openssl_cms_encrypt() encrypts the message in the file with the
+    certificates and outputs the result to the supplied file.
+  . Added openssl_cms_decrypt() that decrypts the S/MIME message in the file
+    and outputs the results to the supplied file.
+  . Added openssl_cms_read() that exports the CMS file to an array of PEM
+    certificates.
+  . Added openssl_cms_sign() that signs the MIME message in the file with
+    a cert and key and output the result to the supplied file.
+  . Added openssl_cms_verify() that verifies that the data block is intact,
+    the signer is who they say they are, and returns the certs of the signers.
+
 - PCRE:
   . Added preg_last_error_msg(), which returns a human-readable message for
     the last PCRE error. It complements preg_last_error(), which returns an