ovs-pki: Remove "online PKI" features and ovs-pki-cgi.

[openvswitch] / NEWS

diff --git a/NEWS b/NEWS
index d673b74809217dcc7920ed7517f4de3cdc22c443..54a711490fbe5cba39e7ca56c5613f7040c24dc5 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -9,9 +9,15 @@ post-v1.8.0
     - OpenFlow:
       - Allow bitwise masking for SHA and THA fields in ARP, SLL and TLL
         fields in IPv6 neighbor discovery messages, and IPv6 flow label.
-    - ovs-dpctl
+    - ovs-dpctl:
       - Support requesting the port number with the "port_no" option in
         the "add-if" command.
+    - ovs-pki: The "online PKI" features have been removed, along with
+      the ovs-pki-cgi program that facilitated it, because of some
+      alarmist insecurity claims.  We do not believe that these claims
+      are true, but because we do not know of any users for this
+      feature it seems better on balance to remove it.  (The ovs-pki-cgi
+      program was not included in distribution packaging.)
 
 
 v1.8.0 - xx xxx xxxx