mirror of
https://github.com/openssl/openssl.git
synced 2024-12-01 14:03:45 +08:00
255 lines
8.0 KiB
Plaintext
255 lines
8.0 KiB
Plaintext
|
||
OpenSSL CHANGES
|
||
_______________
|
||
|
||
|
||
Changes between 0.9.1c and 0.9.2
|
||
|
||
*) Fix the various library and apps files to free up pkeys obtained from
|
||
EVP_PUBKEY_get() et al. Also allow x509.c to handle netscape extensions.
|
||
[Steve Henson]
|
||
|
||
*) Fix reference counting in X509_PUBKEY_get(). This makes
|
||
demos/maurice/example2.c work, amongst others, probably.
|
||
[Steve Henson and Ben Laurie]
|
||
|
||
*) First cut of a cleanup for apps/. First the `ssleay' program is now named
|
||
`openssl' and second, the shortcut symlinks for the `openssl <command>'
|
||
are no longer created. This way we have a single and consistent command
|
||
line interface `openssl <command>', similar to `cvs <command>'.
|
||
[Ralf S. Engelschall, Paul Sutton and Ben Laurie]
|
||
|
||
*) ca.c: move test for DSA keys inside #ifndef NO_DSA. Make pubkey
|
||
BIT STRING wrapper always have zero unused bits.
|
||
[Steve Henson]
|
||
|
||
*) Add CA.pl, perl version of CA.sh, add extended key usage OID.
|
||
[Steve Henson]
|
||
|
||
*) Make the top-level INSTALL documentation easier to understand.
|
||
[Paul Sutton]
|
||
|
||
*) Makefiles updated to exit if an error occurs in a sub-directory
|
||
make (including if user presses ^C) [Paul Sutton]
|
||
|
||
*) Make Montgomery context stuff explicit in RSA data structure.
|
||
[Ben Laurie]
|
||
|
||
*) Fix build order of pem and err to allow for generated pem.h.
|
||
[Ben Laurie]
|
||
|
||
*) Fix renumbering bug in X509_NAME_delete_entry().
|
||
[Ben Laurie]
|
||
|
||
*) Enhanced the err-ins.pl script so it makes the error library number
|
||
global and can add a library name. This is needed for external ASN1 and
|
||
other error libraries.
|
||
[Steve Henson]
|
||
|
||
*) Fixed sk_insert which never worked properly.
|
||
[Steve Henson]
|
||
|
||
*) Fix ASN1 macros so they can handle indefinite length construted
|
||
EXPLICIT tags. Some non standard certificates use these: they can now
|
||
be read in.
|
||
[Steve Henson]
|
||
|
||
*) Merged the various old/obsolete SSLeay documentation files (doc/xxx.doc)
|
||
into a single doc/ssleay.txt bundle. This way the information is still
|
||
preserved but no longer messes up this directory. Now it's new room for
|
||
the new set of documenation files.
|
||
[Ralf S. Engelschall]
|
||
|
||
*) SETs were incorrectly DER encoded. This was a major pain, because they
|
||
shared code with SEQUENCEs, which aren't coded the same. This means that
|
||
almost everything to do with SETs or SEQUENCEs has either changed name or
|
||
number of arguments.
|
||
[Ben Laurie, based on a partial fix by GP Jayan <gp@nsj.co.jp>]
|
||
|
||
*) Fix test data to work with the above.
|
||
[Ben Laurie]
|
||
|
||
*) Fix the RSA header declarations that hid a bug I fixed in 0.9.0b but
|
||
was already fixed by Eric for 0.9.1 it seems.
|
||
[Ben Laurie - pointed out by Ulf M<>ller <ulf@fitug.de>]
|
||
|
||
*) Autodetect FreeBSD3.
|
||
[Ben Laurie]
|
||
|
||
*) Fix various bugs in Configure. This affects the following platforms:
|
||
nextstep
|
||
ncr-scde
|
||
unixware-2.0
|
||
unixware-2.0-pentium
|
||
sco5-cc.
|
||
[Ben Laurie]
|
||
|
||
*) Eliminate generated files from CVS. Reorder tests to regenerate files
|
||
before they are needed.
|
||
[Ben Laurie]
|
||
|
||
*) Generate Makefile.ssl from Makefile.org (to keep CVS happy).
|
||
[Ben Laurie]
|
||
|
||
Changes between 0.9.1b and 0.9.1c
|
||
|
||
*) Added OPENSSL_VERSION_NUMBER to crypto/crypto.h and
|
||
changed SSLeay to OpenSSL in version strings.
|
||
[Ralf S. Engelschall]
|
||
|
||
*) Some fixups to the top-level documents.
|
||
[Paul Sutton]
|
||
|
||
*) Fixed the nasty bug where rsaref.h was not found under compile-time
|
||
because the symlink to include/ was missing.
|
||
[Ralf S. Engelschall]
|
||
|
||
*) Incorporated the popular no-RSA/DSA-only patches
|
||
which allow to compile a RSA-free SSLeay.
|
||
[Andrew Cooke / Interrader Ldt., Ralf S. Engelschall]
|
||
|
||
*) Fixed nasty rehash problem under `make -f Makefile.ssl links'
|
||
when "ssleay" is still not found.
|
||
[Ralf S. Engelschall]
|
||
|
||
*) Added more platforms to Configure: Cray T3E, HPUX 11,
|
||
[Ralf S. Engelschall, Beckmann <beckman@acl.lanl.gov>]
|
||
|
||
*) Updated the README file.
|
||
[Ralf S. Engelschall]
|
||
|
||
*) Added various .cvsignore files in the CVS repository subdirs
|
||
to make a "cvs update" really silent.
|
||
[Ralf S. Engelschall]
|
||
|
||
*) Recompiled the error-definition header files and added
|
||
missing symbols to the Win32 linker tables.
|
||
[Ralf S. Engelschall]
|
||
|
||
*) Cleaned up the top-level documents;
|
||
o new files: CHANGES and LICENSE
|
||
o merged VERSION, HISTORY* and README* files a CHANGES.SSLeay
|
||
o merged COPYRIGHT into LICENSE
|
||
o removed obsolete TODO file
|
||
o renamed MICROSOFT to INSTALL.W32
|
||
[Ralf S. Engelschall]
|
||
|
||
*) Removed dummy files from the 0.9.1b source tree:
|
||
crypto/asn1/x crypto/bio/cd crypto/bio/fg crypto/bio/grep crypto/bio/vi
|
||
crypto/bn/asm/......add.c crypto/bn/asm/a.out crypto/dsa/f crypto/md5/f
|
||
crypto/pem/gmon.out crypto/perlasm/f crypto/pkcs7/build crypto/rsa/f
|
||
crypto/sha/asm/f crypto/threads/f ms/zzz ssl/f ssl/f.mak test/f
|
||
util/f.mak util/pl/f util/pl/f.mak crypto/bf/bf_locl.old apps/f
|
||
[Ralf S. Engelschall]
|
||
|
||
*) Added various platform portability fixes.
|
||
[Mark J. Cox]
|
||
|
||
*) The Genesis of the OpenSSL rpject:
|
||
We start with the latest (unreleased) SSLeay version 0.9.1b which Eric A.
|
||
Young and Tim J. Hudson created while they were working for C2Net until
|
||
summer 1998.
|
||
[The OpenSSL Project]
|
||
|
||
Changes between 0.9.0b and 0.9.1b
|
||
|
||
*) Updated a few CA certificates under certs/
|
||
[Eric A. Young]
|
||
|
||
*) Changed some BIGNUM api stuff.
|
||
[Eric A. Young]
|
||
|
||
*) Various platform ports: OpenBSD, Ultrix, IRIX 64bit, NetBSD,
|
||
DGUX x86, Linux Alpha, etc.
|
||
[Eric A. Young]
|
||
|
||
*) New COMP library [crypto/comp/] for SSL Record Layer Compression:
|
||
RLE (dummy implemented) and ZLIB (really implemented when ZLIB is
|
||
available).
|
||
[Eric A. Young]
|
||
|
||
*) Add -strparse option to asn1pars program which parses nested
|
||
binary structures
|
||
[Dr Stephen Henson <shenson@bigfoot.com>]
|
||
|
||
*) Added "oid_file" to ssleay.cnf for "ca" and "req" programs.
|
||
[Eric A. Young]
|
||
|
||
*) DSA fix for "ca" program.
|
||
[Eric A. Young]
|
||
|
||
*) Added "-genkey" option to "dsaparam" program.
|
||
[Eric A. Young]
|
||
|
||
*) Added RIPE MD160 (rmd160) message digest.
|
||
[Eric A. Young]
|
||
|
||
*) Added -a (all) option to "ssleay version" command.
|
||
[Eric A. Young]
|
||
|
||
*) Added PLATFORM define which is the id given to Configure.
|
||
[Eric A. Young]
|
||
|
||
*) Added MemCheck_XXXX functions to crypto/mem.c for memory checking.
|
||
[Eric A. Young]
|
||
|
||
*) Extended the ASN.1 parser routines.
|
||
[Eric A. Young]
|
||
|
||
*) Extended BIO routines to support REUSEADDR, seek, tell, etc.
|
||
[Eric A. Young]
|
||
|
||
*) Added a BN_CTX to the BN library.
|
||
[Eric A. Young]
|
||
|
||
*) Fixed the weak key values in DES library
|
||
[Eric A. Young]
|
||
|
||
*) Changed API in EVP library for cipher aliases.
|
||
[Eric A. Young]
|
||
|
||
*) Added support for RC2/64bit cipher.
|
||
[Eric A. Young]
|
||
|
||
*) Converted the lhash library to the crypto/mem.c functions.
|
||
[Eric A. Young]
|
||
|
||
*) Added more recognized ASN.1 object ids.
|
||
[Eric A. Young]
|
||
|
||
*) Added more RSA padding checks for SSL/TLS.
|
||
[Eric A. Young]
|
||
|
||
*) Added BIO proxy/filter functionality.
|
||
[Eric A. Young]
|
||
|
||
*) Added extra_certs to SSL_CTX which can be used
|
||
send extra CA certificates to the client in the CA cert chain sending
|
||
process. It can be configured with SSL_CTX_add_extra_chain_cert().
|
||
[Eric A. Young]
|
||
|
||
*) Now Fortezza is denied in the authentication phase because
|
||
this is key exchange mechanism is not supported by SSLeay at all.
|
||
[Eric A. Young]
|
||
|
||
*) Additional PKCS1 checks.
|
||
[Eric A. Young]
|
||
|
||
*) Support the string "TLSv1" for all TLS v1 ciphers.
|
||
[Eric A. Young]
|
||
|
||
*) Added function SSL_get_ex_data_X509_STORE_CTX_idx() which gives the
|
||
ex_data index of the SSL context in the X509_STORE_CTX ex_data.
|
||
[Eric A. Young]
|
||
|
||
*) Fixed a few memory leaks.
|
||
[Eric A. Young]
|
||
|
||
*) Fixed various code and comment typos.
|
||
[Eric A. Young]
|
||
|
||
*) A minor bug in ssl/s3_clnt.c where there would always be 4 0
|
||
bytes sent in the client random.
|
||
[Edward Bishop <ebishop@spyglass.com>]
|
||
|