The encoding of negative ASN1 INTEGERs and the conversion of BNs to negative
integers was completely broken. Also added a NEG_PUBKEY_BUG compilation option
to compensate for public keys improperly encoded as negative integers.
diff --git a/CHANGES b/CHANGES
index 1bd0fc2..b72f682 100644
--- a/CHANGES
+++ b/CHANGES
@@ -10,6 +10,12 @@
[23-Dec-1998] down below; but in later
versions, these hyphens are gone.]
+ *) Fix the encoding and decoding of negative ASN1 INTEGERS and conversion
+ to and from BNs: it was completely broken. New compilation option
+ NEG_PUBKEY_BUG to allow for some broken certificates that encode public
+ key elements as negative integers.
+ [Steve Henson]
+
*) Reorganize and speed up MD5.
[Andy Polyakov <appro@fy.chalmers.se>]
