New expansion operator sha256 for certificates. Bug 1170

[exim.git] / doc / doc-txt / NewStuff

diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff
index 95b4119d167c853800511cbec885af1ec755eb9b..9eebd089f95b1dffe74ef3e0ec9bf24a9b847cb1 100644 (file)
--- a/doc/doc-txt/NewStuff
+++ b/doc/doc-txt/NewStuff
@@ -27,10 +27,27 @@ Version 4.83
     and a second regex to extract malware_name.  The mail spoofile name can
     be included in the command line.
 
- 5. When built with OpenSSL the smtp transport now supports options
-    "tls_verify_hosts" and "tls_try_verify_hosts".  If either is set the
-    certificate verification is split from the encryption operation. The
-    default remains that a failed verification cancels the encryption.
+ 5. The smtp transport now supports options "tls_verify_hosts" and
+    "tls_try_verify_hosts".  If either is set the certificate verification
+    is split from the encryption operation. The default remains that a failed
+    verification cancels the encryption.
+
+ 6. New SERVERS override of default ldap server list.  In the ACLs, an ldap
+    lookup can now set a list of servers to use that is different from the
+    default list.
+
+ 7. New command-line option -C for exiqgrep to specify alternate exim.conf
+    file when searching the queue.
+
+ 8. EXPERIMENTAL_OCSP now supports GnuTLS also, if you have version 3.1.3
+    or later of that.
+
+ 9. Support for DNSSEC on outbound connections.
+
+10. New variables "tls_(in,out)_(our,peer)cert" and expansion item
+    "certextract" to extract fields from them. Hash operators md5 and sha1
+    work over them for generating fingerprints, and a new sha256 operator
+    for them added.
 
 
 Version 4.82