Update NEWS/UPGRADING

diff --git a/NEWS b/NEWS
index c7608c91032f34327185a36500070dfbf1fc2e8c..3b41c6a0550661d13b224355aa28d88b2a37e832 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -66,7 +66,10 @@ PHP                                                                        NEWS
   . Added certificate fingerprint support. (Tjerk Meesters)
   . Added explicit TLSv1.1 and TLSv1.2 stream transports. (Daniel Lowrey)
   . Fixed bug #65729 (CN_match gives false positive). (Tjerk Meesters)
-  
+  . Peer name verification matches SAN DNS names for certs using
+    the Subject Alternative Name x509 extension. (Daniel Lowrey)
+  . Fixed segfault when built against OpenSSL>=1.0.1 (Daniel Lowrey)
+
 - PDO_pgsql:
   . Fixed Bug #42614 (PDO_pgsql: add pg_get_notify support). (Matteo)
   . Fixed Bug #63657 (pgsqlCopyFromFile, pgsqlCopyToArray use Postgres < 7.3

diff --git a/UPGRADING b/UPGRADING
index 8f83b5110136304bad43e36f5af444fd3716011a..e59a6329189d946e389144ab01c3667f3036a314 100755 (executable)
--- a/UPGRADING
+++ b/UPGRADING
@@ -51,6 +51,8 @@ PHP X.Y UPGRADE NOTES
 
 - Added openssl crypto method stream context option.
 
+- Added openssl peer verification support for SAN x509 extension
+
 - Added use function and use const.
   (https://wiki.php.net/rfc/use_function)