diff --git a/ChangeLog b/ChangeLog
index 40ee751d7..20431db94 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,21 @@
+2007-06-02  Love Hörnquist Åstrand  <lha@it.su.se>
+
+	* kdc/pkinit.c: In case of OCSP verification failure, referash
+	every 5 min. In case of success, refreash 2 min before expiring or
+	faster.
+	
 2007-05-31  Love Hörnquist Åstrand  <lha@it.su.se>
+	
+	* lib/krb5/krb5_err.et: add error 68, WRONG_REALM
+
+	* kdc/pkinit.c: Handle the ms san in a propper way, still cheat
+	with the realm name.
+
+	* kdc/kerberos5.c: If _kdc_pk_check_client failes, bail out
+	directly and hand the error back to the client.
+
+	* lib/krb5/krb5_err.et: Add missing REVOCATION_STATUS_UNAVAILABLE
+	and fix error message for CLIENT_NAME_MISMATCH.
 
 	* kdc/pkinit.c: More logging for pk-init client mismatch.