Commit 148f29855c for openssl.org

commit 148f29855cc81560b4a402a93fb5318f7f2581e9
Author: Eugene Syromiatnikov <esyr@openssl.org>
Date:   Sun Apr 5 13:20:41 2026 +0200

    CHANGES.md: move SSL_{add,set}1_{dnsname,ipaddr} entry to 4.0 section

    Also reword it to match the style of other entries.

    Complements: cb1645e83bd9 "Add a changes entry"
    Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>

    Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
    Reviewed-by: Paul Dale <paul.dale@oracle.com>
    Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
    MergeDate: Wed Apr  8 10:00:06 2026
    (Merged from https://github.com/openssl/openssl/pull/30686)

diff --git a/CHANGES.md b/CHANGES.md
index b6f4828d79..80e506160e 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -216,6 +216,15 @@ OpenSSL Releases

    *Bob Beck*

+ * Added `SSL_add1_dnsname()`, `SSL_set1_dnsname()`, `SSL_add1_ipaddr()`,
+   and `SSL_set1_ipaddr()` functions as a replacement for `SSL_add1_host()`
+   and `SSL_set1_host()` that are deprecated now.  The new replacement API
+   functions was added to support checking multiple names against a certificate
+   with `X509_VERIFY_PARAM`.  See `X509_VERIFY_PARAM_set_flags(3)` for full
+   details.
+
+   *Bob Beck*
+
  * Added `SSL_CTX_get0_alpn_protos()` and `SSL_get0_alpn_protos()` functions.

    *Daniel Kubec*
@@ -1009,13 +1018,6 @@ OpenSSL 3.6

    *Dimitri John Ledkov*

- * `SSL_add1_host()` and `SSL_set1_host()` were deprecated. The new replacement functions
-   `SSL_add1_dnsname()`, `SSL_set1_dnsname()`, `SSL_add1_ipaddr()`, and `SSL_set1_ipaddr()` were added.
-   API was added to support checking multiple names against a certificate with
-   `X509_VERIFY_PARAM`.  See `X509_VERIFY_PARAM_set_flags(3)` for full details.
-
-   *Bob Beck*
-
  * Added `X509_CRL_get0_tbs_sigalg()` accessor for the signature
    `AlgorithmIdentifier` inside CRL's `TBSCertList`.