Skip to content

2.11

Choose a tag to compare

@mtrojnar mtrojnar released this 20 Jan 22:59
· 20 commits to master since this release

2.11 (2026.01.20)

  • added keyUsage validation for signer certificate
    (thanks to Hanqing Zhao and Zi-Quan You for reporting the issue)
  • added printing CRL details during signature verification
  • implemented a workaround for CRL servers returning the HTTP Content-Type
    header other than application/pkix-crl (thanks to Chris Thibodeaux)
  • fixed HTTP keep-alive handling
  • fixed macOS compiler and linker flags
  • fixed undefined BIO_get_fp() behavior with BIO_FLAGS_UPLINK_INTERNAL