OID Support has been dropped from 2.2.x

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@234109 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index cd90736f2f2c2e9a88c876ccb55eb063d00cd82d..b64ee4e3f4fc1278489a719814b8ff7b5a033502 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,6 +2,11 @@
 Changes with Apache 2.3.0
   [Remove entries to the current 2.0 and 2.2 section below, when backported]
 
+  *) Teach mod_ssl to use arbitraty OIDs in an SSLRequire directive,
+     allowing string-valued client certificate attributes to be used for
+     access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
+     [Martin Kraemer, David Reid]
+
 Changes with Apache 2.1.7
   *) SECURITY: CAN-2005-2491 (cve.mitre.org): 
      Fix integer overflows in PCRE in quantifier parsing which could
@@ -34,11 +39,6 @@ Changes with Apache 2.1.7
      links for clients not using an Authorization header. [Graham Leggett,
      Jon Snow <jsnow27 gatesec.net>]
 
-  *) Teach mod_ssl to use arbitraty OIDs in an SSLRequire directive,
-     allowing string-valued client certificate attributes to be used for
-     access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
-     [Martin Kraemer, David Reid]
-
   *) mod_cache: Restore the HTTP status of cached responses.
      [Hansjoerg Pehofer <hansjoerg.pehofer uibk.ac.at>]