Forbid repeated X.509 extensions
diff --git a/ChangeLog b/ChangeLog
index 8b5848a..70e6ed5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -15,6 +15,7 @@
 
 Changes
    * Blind RSA private operations even when POLARSSL_RSA_NO_CRT is defined.
+   * Forbid repeated extensions in X.509 certificates.
 
 = Version 1.2.12 released 2014-10-24