diff --git a/lib/hx509/ChangeLog b/lib/hx509/ChangeLog
index add82b5f6..82715ddea 100644
--- a/lib/hx509/ChangeLog
+++ b/lib/hx509/ChangeLog
@@ -1,3 +1,17 @@
+2006-12-06  Love Hörnquist Åstrand  <lha@it.su.se>
+
+	* cms.c: Provide time to _hx509_calculate_path so we don't send no
+	longer valid certs to our peer.
+
+	* cert.c (find_parent): when checking for certs and its not a
+	trust anchor, require time be in range.
+	(_hx509_query_match_cert): Add time validity-testing to query mask
+
+	* hx_locl.h: add time validity-testing to query mask
+
+	* test_cms.in: Tests for CMS SignedData with incomplete chain from
+	the signer.
+	
 2006-11-28  Love Hörnquist Åstrand  <lha@it.su.se>
 
 	* cms.c (hx509_cms_verify_signed): specify what signature we