[thirdparty/openssl.git] / CHANGES


 OpenSSL CHANGES
 _______________

 Changes between 0.9.8 and 0.9.9  [xx XXX xxxx]

  *) Add print only support for Issuing Distribution Point CRL extension.
     [Steve Henson]

 Changes between 0.9.8 and 0.9.8a  [XX xxx XXXX]

  *) 

 Changes between 0.9.7h and 0.9.8  [05 Jul 2005]

  *) Add libcrypto.pc and libssl.pc for those who feel they need them.
     [Richard Levitte]

  *) Change CA.sh and CA.pl so they don't bundle the CSR and the private
     key into the same file any more.
     [Richard Levitte]

  *) Add initial support for Win64, both IA64 and AMD64/x64 flavors.
     [Andy Polyakov]

  *) Add -utf8 command line and config file option to 'ca'.
     [Stefan <stf@udoma.org]

  *) Removed the macro des_crypt(), as it seems to conflict with some
     libraries.  Use DES_crypt().
     [Richard Levitte]

  *) Correct naming of the 'chil' and '4758cca' ENGINEs. This
     involves renaming the source and generated shared-libs for
     both. The engines will accept the corrected or legacy ids
     ('ncipher' and '4758_cca' respectively) when binding. NB,
     this only applies when building 'shared'.
     [Corinna Vinschen <vinschen@redhat.com> and Geoff Thorpe]

  *) Add attribute functions to EVP_PKEY structure. Modify
     PKCS12_create() to recognize a CSP name attribute and
     use it. Make -CSP option work again in pkcs12 utility.
     [Steve Henson]

  *) Add new functionality to the bn blinding code:
     - automatic re-creation of the BN_BLINDING parameters after
       a fixed number of uses (currently 32)
     - add new function for parameter creation
     - introduce flags to control the update behaviour of the
       BN_BLINDING parameters
     - hide BN_BLINDING structure
     Add a second BN_BLINDING slot to the RSA structure to improve
     performance when a single RSA object is shared among several
     threads.
     [Nils Larsch]

  *) Add support for DTLS.
     [Nagendra Modadugu <nagendra@cs.stanford.edu> and Ben Laurie]

  *) Add support for DER encoded private keys (SSL_FILETYPE_ASN1)
     to SSL_CTX_use_PrivateKey_file() and SSL_use_PrivateKey_file()
     [Walter Goulet]

  *) Remove buggy and incompletet DH cert support from
     ssl/ssl_rsa.c and ssl/s3_both.c
     [Nils Larsch]

  *) Use SHA-1 instead of MD5 as the default digest algorithm for
     the apps/openssl applications.
     [Nils Larsch]

  *) Compile clean with "-Wall -Wmissing-prototypes
     -Wstrict-prototypes -Wmissing-declarations -Werror". Currently
     DEBUG_SAFESTACK must also be set.
     [Ben Laurie]

  *) Change ./Configure so that certain algorithms can be disabled by default.
     The new counterpiece to "no-xxx" is "enable-xxx".

     The patented RC5 and MDC2 algorithms will now be disabled unless
     "enable-rc5" and "enable-mdc2", respectively, are specified.

     (IDEA remains enabled despite being patented.  This is because IDEA
     is frequently required for interoperability, and there is no license
     fee for non-commercial use.  As before, "no-idea" can be used to
     avoid this algorithm.)

     [Bodo Moeller]

  *) Add processing of proxy certificates (see RFC 3820).  This work was
     sponsored by KTH (The Royal Institute of Technology in Stockholm) and
     EGEE (Enabling Grids for E-science in Europe).
     [Richard Levitte]

  *) RC4 performance overhaul on modern architectures/implementations, such
     as Intel P4, IA-64 and AMD64.
     [Andy Polyakov]

  *) New utility extract-section.pl. This can be used specify an alternative
     section number in a pod file instead of having to treat each file as
     a separate case in Makefile. This can be done by adding two lines to the
     pod file:

     =for comment openssl_section:XXX

     The blank line is mandatory.

     [Steve Henson]

  *) New arguments -certform, -keyform and -pass for s_client and s_server
     to allow alternative format key and certificate files and passphrase
     sources.
     [Steve Henson]

  *) New structure X509_VERIFY_PARAM which combines current verify parameters,
     update associated structures and add various utility functions.

     Add new policy related verify parameters, include policy checking in 
     standard verify code. Enhance 'smime' application with extra parameters
     to support policy checking and print out.
     [Steve Henson]

  *) Add a new engine to support VIA PadLock ACE extensions in the VIA C3
     Nehemiah processors. These extensions support AES encryption in hardware
     as well as RNG (though RNG support is currently disabled).
     [Michal Ludvig <michal@logix.cz>, with help from Andy Polyakov]

  *) Deprecate BN_[get|set]_params() functions (they were ignored internally).
     [Geoff Thorpe]

  *) New FIPS 180-2 algorithms, SHA-224/-256/-384/-512 are implemented.
     [Andy Polyakov and a number of other people]

  *) Improved PowerPC platform support. Most notably BIGNUM assembler
     implementation contributed by IBM.
     [Suresh Chari, Peter Waltenberg, Andy Polyakov]

  *) The new 'RSA_generate_key_ex' function now takes a BIGNUM for the public
     exponent rather than 'unsigned long'. There is a corresponding change to
     the new 'rsa_keygen' element of the RSA_METHOD structure.
     [Jelte Jansen, Geoff Thorpe]

  *) Functionality for creating the initial serial number file is now
     moved from CA.pl to the 'ca' utility with a new option -create_serial.

     (Before OpenSSL 0.9.7e, CA.pl used to initialize the serial
     number file to 1, which is bound to cause problems.  To avoid
     the problems while respecting compatibility between different 0.9.7
     patchlevels, 0.9.7e  employed 'openssl x509 -next_serial' in
     CA.pl for serial number initialization.  With the new release 0.9.8,
     we can fix the problem directly in the 'ca' utility.)
     [Steve Henson]

  *) Reduced header interdepencies by declaring more opaque objects in
     ossl_typ.h. As a consequence, including some headers (eg. engine.h) will
     give fewer recursive includes, which could break lazy source code - so
     this change is covered by the OPENSSL_NO_DEPRECATED symbol. As always,
     developers should define this symbol when building and using openssl to
     ensure they track the recommended behaviour, interfaces, [etc], but
     backwards-compatible behaviour prevails when this isn't defined.
     [Geoff Thorpe]

  *) New function X509_POLICY_NODE_print() which prints out policy nodes.
     [Steve Henson]

  *) Add new EVP function EVP_CIPHER_CTX_rand_key and associated functionality.
     This will generate a random key of the appropriate length based on the 
     cipher context. The EVP_CIPHER can provide its own random key generation
     routine to support keys of a specific form. This is used in the des and 
     3des routines to generate a key of the correct parity. Update S/MIME
     code to use new functions and hence generate correct parity DES keys.
     Add EVP_CHECK_DES_KEY #define to return an error if the key is not 
     valid (weak or incorrect parity).
     [Steve Henson]

  *) Add a local set of CRLs that can be used by X509_verify_cert() as well
     as looking them up. This is useful when the verified structure may contain
     CRLs, for example PKCS#7 signedData. Modify PKCS7_verify() to use any CRLs
     present unless the new PKCS7_NO_CRL flag is asserted.
     [Steve Henson]

  *) Extend ASN1 oid configuration module. It now additionally accepts the
     syntax:

     shortName = some long name, 1.2.3.4
     [Steve Henson]

  *) Reimplemented the BN_CTX implementation. There is now no more static
     limitation on the number of variables it can handle nor the depth of the
     "stack" handling for BN_CTX_start()/BN_CTX_end() pairs. The stack
     information can now expand as required, and rather than having a single
     static array of bignums, BN_CTX now uses a linked-list of such arrays
     allowing it to expand on demand whilst maintaining the usefulness of
     BN_CTX's "bundling".
     [Geoff Thorpe]

  *) Add a missing BN_CTX parameter to the 'rsa_mod_exp' callback in RSA_METHOD
     to allow all RSA operations to function using a single BN_CTX.
     [Geoff Thorpe]

  *) Preliminary support for certificate policy evaluation and checking. This
     is initially intended to pass the tests outlined in "Conformance Testing
     of Relying Party Client Certificate Path Processing Logic" v1.07.
     [Steve Henson]

  *) bn_dup_expand() has been deprecated, it was introduced in 0.9.7 and
     remained unused and not that useful. A variety of other little bignum
     tweaks and fixes have also been made continuing on from the audit (see
     below).
     [Geoff Thorpe]

  *) Constify all or almost all d2i, c2i, s2i and r2i functions, along with
     associated ASN1, EVP and SSL functions and old ASN1 macros.
     [Richard Levitte]

  *) BN_zero() only needs to set 'top' and 'neg' to zero for correct results,
     and this should never fail. So the return value from the use of
     BN_set_word() (which can fail due to needless expansion) is now deprecated;
     if OPENSSL_NO_DEPRECATED is defined, BN_zero() is a void macro.
     [Geoff Thorpe]

  *) BN_CTX_get() should return zero-valued bignums, providing the same
     initialised value as BN_new().
Commit	Line	Data
81a6c781	1
f1c236f8	2	OpenSSL CHANGES
651d0aff RE	3	_______________
651d0aff RE	4
28e4fe34 RL	5	Changes between 0.9.8 and 0.9.9 [xx XXX xxxx]
28e4fe34 RL	6
231493c9 DSH	7	*) Add print only support for Issuing Distribution Point CRL extension.
231493c9 DSH	8	[Steve Henson]
28e4fe34	9
2bd2cd9b RL	10	Changes between 0.9.8 and 0.9.8a [XX xxx XXXX]
	11
	12	*)
	13
	14	Changes between 0.9.7h and 0.9.8 [05 Jul 2005]
12bdb643	15
c8310124 RL	16	*) Add libcrypto.pc and libssl.pc for those who feel they need them.
	17	[Richard Levitte]
	18
	19	*) Change CA.sh and CA.pl so they don't bundle the CSR and the private
	20	key into the same file any more.
	21	[Richard Levitte]
	22
8d3509b9 AP	23	*) Add initial support for Win64, both IA64 and AMD64/x64 flavors.
	24	[Andy Polyakov]
	25
cbdac46d DSH	26	*) Add -utf8 command line and config file option to 'ca'.
	27	[Stefan <stf@udoma.org]
	28
c8310124 RL	29	*) Removed the macro des_crypt(), as it seems to conflict with some
	30	libraries. Use DES_crypt().
	31	[Richard Levitte]
	32
a2c32e2d GT	33	*) Correct naming of the 'chil' and '4758cca' ENGINEs. This
	34	involves renaming the source and generated shared-libs for
	35	both. The engines will accept the corrected or legacy ids
	36	('ncipher' and '4758_cca' respectively) when binding. NB,
	37	this only applies when building 'shared'.
	38	[Corinna Vinschen <vinschen@redhat.com> and Geoff Thorpe]
	39
b6995add DSH	40	*) Add attribute functions to EVP_PKEY structure. Modify
	41	PKCS12_create() to recognize a CSP name attribute and
	42	use it. Make -CSP option work again in pkcs12 utility.
	43	[Steve Henson]
	44
800e400d NL	45	*) Add new functionality to the bn blinding code:
	46	- automatic re-creation of the BN_BLINDING parameters after
	47	a fixed number of uses (currently 32)
	48	- add new function for parameter creation
	49	- introduce flags to control the update behaviour of the
	50	BN_BLINDING parameters
	51	- hide BN_BLINDING structure
	52	Add a second BN_BLINDING slot to the RSA structure to improve
	53	performance when a single RSA object is shared among several
	54	threads.
	55	[Nils Larsch]
	56
36d16f8e BL	57	*) Add support for DTLS.
	58	[Nagendra Modadugu <nagendra@cs.stanford.edu> and Ben Laurie]
	59
dc0ed30c NL	60	*) Add support for DER encoded private keys (SSL_FILETYPE_ASN1)
	61	to SSL_CTX_use_PrivateKey_file() and SSL_use_PrivateKey_file()
	62	[Walter Goulet]
	63
6049399b NL	64	*) Remove buggy and incompletet DH cert support from
	65	ssl/ssl_rsa.c and ssl/s3_both.c
	66	[Nils Larsch]
	67
12bdb643 NL	68	*) Use SHA-1 instead of MD5 as the default digest algorithm for
	69	the apps/openssl applications.
	70	[Nils Larsch]
4d94ae00	71
41a15c4f BL	72	*) Compile clean with "-Wall -Wmissing-prototypes
	73	-Wstrict-prototypes -Wmissing-declarations -Werror". Currently
	74	DEBUG_SAFESTACK must also be set.
	75	[Ben Laurie]
	76
c9a112f5	77	*) Change ./Configure so that certain algorithms can be disabled by default.
ecc5ef87 BM	78	The new counterpiece to "no-xxx" is "enable-xxx".
	79
	80	The patented RC5 and MDC2 algorithms will now be disabled unless
	81	"enable-rc5" and "enable-mdc2", respectively, are specified.
	82
	83	(IDEA remains enabled despite being patented. This is because IDEA
	84	is frequently required for interoperability, and there is no license
	85	fee for non-commercial use. As before, "no-idea" can be used to
	86	avoid this algorithm.)
	87
c9a112f5 BM	88	[Bodo Moeller]
c9a112f5 BM	89
6951c23a RL	90	*) Add processing of proxy certificates (see RFC 3820). This work was
	91	sponsored by KTH (The Royal Institute of Technology in Stockholm) and
	92	EGEE (Enabling Grids for E-science in Europe).
	93	[Richard Levitte]
	94
ea681ba8 AP	95	*) RC4 performance overhaul on modern architectures/implementations, such
	96	as Intel P4, IA-64 and AMD64.
	97	[Andy Polyakov]
	98
401ee37a DSH	99	*) New utility extract-section.pl. This can be used specify an alternative
	100	section number in a pod file instead of having to treat each file as
	101	a separate case in Makefile. This can be done by adding two lines to the
	102	pod file:
	103
	104	=for comment openssl_section:XXX
	105
	106	The blank line is mandatory.
	107
	108	[Steve Henson]
	109
826a42a0 DSH	110	*) New arguments -certform, -keyform and -pass for s_client and s_server
	111	to allow alternative format key and certificate files and passphrase
	112	sources.
	113	[Steve Henson]
	114
5d7c222d DSH	115	*) New structure X509_VERIFY_PARAM which combines current verify parameters,
	116	update associated structures and add various utility functions.
	117
	118	Add new policy related verify parameters, include policy checking in
	119	standard verify code. Enhance 'smime' application with extra parameters
	120	to support policy checking and print out.
	121	[Steve Henson]
	122
30fe028f GT	123	*) Add a new engine to support VIA PadLock ACE extensions in the VIA C3
	124	Nehemiah processors. These extensions support AES encryption in hardware
	125	as well as RNG (though RNG support is currently disabled).
	126	[Michal Ludvig <michal@logix.cz>, with help from Andy Polyakov]
	127
df11e1e9 GT	128	*) Deprecate BN_[get\|set]_params() functions (they were ignored internally).
	129	[Geoff Thorpe]
	130
ad500340 AP	131	*) New FIPS 180-2 algorithms, SHA-224/-256/-384/-512 are implemented.
	132	[Andy Polyakov and a number of other people]
	133
e14f4aab AP	134	*) Improved PowerPC platform support. Most notably BIGNUM assembler
	135	implementation contributed by IBM.
	136	[Suresh Chari, Peter Waltenberg, Andy Polyakov]
	137
bcfea9fb GT	138	*) The new 'RSA_generate_key_ex' function now takes a BIGNUM for the public
	139	exponent rather than 'unsigned long'. There is a corresponding change to
	140	the new 'rsa_keygen' element of the RSA_METHOD structure.
	141	[Jelte Jansen, Geoff Thorpe]
	142
d5f686d8 BM	143	*) Functionality for creating the initial serial number file is now
	144	moved from CA.pl to the 'ca' utility with a new option -create_serial.
	145
	146	(Before OpenSSL 0.9.7e, CA.pl used to initialize the serial
	147	number file to 1, which is bound to cause problems. To avoid
	148	the problems while respecting compatibility between different 0.9.7
	149	patchlevels, 0.9.7e employed 'openssl x509 -next_serial' in
	150	CA.pl for serial number initialization. With the new release 0.9.8,
	151	we can fix the problem directly in the 'ca' utility.)
64674bcc DSH	152	[Steve Henson]
64674bcc DSH	153
3a87a9b9 GT	154	*) Reduced header interdepencies by declaring more opaque objects in
	155	ossl_typ.h. As a consequence, including some headers (eg. engine.h) will
	156	give fewer recursive includes, which could break lazy source code - so
	157	this change is covered by the OPENSSL_NO_DEPRECATED symbol. As always,
	158	developers should define this symbol when building and using openssl to
	159	ensure they track the recommended behaviour, interfaces, [etc], but
	160	backwards-compatible behaviour prevails when this isn't defined.
	161	[Geoff Thorpe]
	162
bf5773fa DSH	163	*) New function X509_POLICY_NODE_print() which prints out policy nodes.
	164	[Steve Henson]
	165
216659eb DSH	166	*) Add new EVP function EVP_CIPHER_CTX_rand_key and associated functionality.
	167	This will generate a random key of the appropriate length based on the
	168	cipher context. The EVP_CIPHER can provide its own random key generation
	169	routine to support keys of a specific form. This is used in the des and
	170	3des routines to generate a key of the correct parity. Update S/MIME
	171	code to use new functions and hence generate correct parity DES keys.
	172	Add EVP_CHECK_DES_KEY #define to return an error if the key is not
	173	valid (weak or incorrect parity).
	174	[Steve Henson]
	175
e1a27eb3 DSH	176	*) Add a local set of CRLs that can be used by X509_verify_cert() as well
	177	as looking them up. This is useful when the verified structure may contain
	178	CRLs, for example PKCS#7 signedData. Modify PKCS7_verify() to use any CRLs
	179	present unless the new PKCS7_NO_CRL flag is asserted.
	180	[Steve Henson]
	181
6446e0c3 DSH	182	*) Extend ASN1 oid configuration module. It now additionally accepts the
	183	syntax:
	184
	185	shortName = some long name, 1.2.3.4
	186	[Steve Henson]
	187
5c98b2ca GT	188	*) Reimplemented the BN_CTX implementation. There is now no more static
	189	limitation on the number of variables it can handle nor the depth of the
	190	"stack" handling for BN_CTX_start()/BN_CTX_end() pairs. The stack
	191	information can now expand as required, and rather than having a single
	192	static array of bignums, BN_CTX now uses a linked-list of such arrays
	193	allowing it to expand on demand whilst maintaining the usefulness of
	194	BN_CTX's "bundling".
	195	[Geoff Thorpe]
	196
46ef873f GT	197	*) Add a missing BN_CTX parameter to the 'rsa_mod_exp' callback in RSA_METHOD
	198	to allow all RSA operations to function using a single BN_CTX.
	199	[Geoff Thorpe]
	200
4acc3e90 DSH	201	*) Preliminary support for certificate policy evaluation and checking. This
	202	is initially intended to pass the tests outlined in "Conformance Testing
	203	of Relying Party Client Certificate Path Processing Logic" v1.07.
	204	[Steve Henson]
	205
7f663ce4 GT	206	*) bn_dup_expand() has been deprecated, it was introduced in 0.9.7 and
	207	remained unused and not that useful. A variety of other little bignum
	208	tweaks and fixes have also been made continuing on from the audit (see
	209	below).
	210	[Geoff Thorpe]
	211
875a644a RL	212	*) Constify all or almost all d2i, c2i, s2i and r2i functions, along with
875a644a RL	213	associated ASN1, EVP and SSL functions and old ASN1 macros.
7f663ce4	214	[Richard Levitte]
875a644a	215
b6358c89 GT	216	*) BN_zero() only needs to set 'top' and 'neg' to zero for correct results,
	217	and this should never fail. So the return value from the use of
	218	BN_set_word() (which can fail due to needless expansion) is now deprecated;
	219	if OPENSSL_NO_DEPRECATED is defined, BN_zero() is a void macro.
	220	[Geoff Thorpe]
	221
9e051bac GT	222	*) BN_CTX_get() should return zero-valued bignums, providing the same
	223	initialised value as BN_new().
	224