add entry to ChangeLog
diff --git a/ChangeLog b/ChangeLog
index b39b953..b6fa807 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -11,6 +11,13 @@
previously lead to a stack overflow on constrained targets.
* Add `MBEDTLS_SELF_TEST` for the mbedtls_self_test functions
in the header files, which missed the precompilation check. #971
+ * Server's RSA certificate in certs.c was SHA-1 signed. In the default
+ mbedTLS configuration only SHA-2 signed certificates are accepted.
+ This certificate is used in the demo server programs, which lead the
+ client programs to fail at the peer's certificate verification
+ due to an unacceptable hash signature. The certificate has been
+ updated to one that is SHA-256 signed. Fix contributed by
+ Illya Gerasymchuk.
= mbed TLS 2.16.0 branch released 2018-12-21