Be careful about DNS response AD/AA bits for error returns

[user/henk/code/exim.git] / doc / doc-txt / NewStuff

diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff
index 4caa897e305a310171765a2aa9b654d0953de5bc..731769629c2027890f0e06d3bb19b02ef00010b0 100644 (file)
--- a/doc/doc-txt/NewStuff
+++ b/doc/doc-txt/NewStuff
@@ -35,12 +35,19 @@ Version 4.93
 
 11. Main options for DKIM verify to filter hash and key types.
 
-12. Under GnuTLS, with TLS1.3, support for full-chain OCSP stapling.
+12. With TLS1.3, support for full-chain OCSP stapling.
 
 13. Dual-certificate stacks on servers now support OCSP stapling, under OpenSSL.
 
 14: An smtp:ehlo transport event, for observability of the remote offered features.
 
+15: Support under OpenSSL for writing NSS-style key files for packet-capture
+    decode.  The environment variable SSLKEYLOGFILE is used; if an absolute path
+    it must indicate a file under the spool directory; if relative the the spool
+    directory is prepended.  Works on the server side only.  Support under 
+    GnuTLS was already there, being done purely by the library (server side
+    only, and exim must be run as root).
+
 
 Version 4.92
 --------------