]>
Commit | Line | Data |
---|---|---|
651d0aff | 1 | |
f1c236f8 | 2 | OpenSSL CHANGES |
651d0aff RE |
3 | _______________ |
4 | ||
5 | ||
9cb0969f | 6 | Changes between 0.9.1c and 0.9.2 |
0172f988 | 7 | |
55a9cc6e DSH |
8 | *) Modifications to the mkdef.pl for Win32 DEF file creation. The usage |
9 | message is now correct (it understands "crypto" and "ssl" on its | |
10 | command line). There is also now an "update" option. This will update | |
11 | the util/ssleay.num and util/libeay.num files with any new functions. | |
12 | If you do a: | |
13 | perl util/mkdef.pl crypto ssl update | |
14 | it will update them. | |
15 | ||
8073036d RE |
16 | *) Overhauled the Perl interface (perl/*): |
17 | - ported BN stuff to OpenSSL's different BN library | |
18 | - made the perl/ source tree CVS-aware | |
19 | - renamed the package from SSLeay to OpenSSL (the files still contain | |
20 | their history because I've copied them in the repository) | |
21 | - removed obsolete files (the test scripts will be replaced | |
22 | by better Test::Harness variants in the future) | |
23 | [Ralf S. Engelschall] | |
24 | ||
483fdf18 RE |
25 | *) First cut for a very conservative source tree cleanup: |
26 | 1. merge various obsolete readme texts into doc/ssleay.txt | |
27 | where we collect the old documents and readme texts. | |
28 | 2. remove the first part of files where I'm already sure that we no | |
29 | longer need them because of three reasons: either they are just temporary | |
30 | files which were left by Eric or they are preserved original files where | |
31 | I've verified that the diff is also available in the CVS via "cvs diff | |
32 | -rSSLeay_0_8_1b" or they were renamed (as it was definitely the case for | |
33 | the crypto/md/ stuff). | |
34 | [Ralf S. Engelschall] | |
35 | ||
175b0942 DSH |
36 | *) More extension code. Incomplete support for subject and issuer alt |
37 | name, issuer and authority key id. Change the i2v function parameters | |
38 | and add an extra 'crl' parameter in the X509V3_CTX structure: guess | |
39 | what that's for :-) Fix to ASN1 macro which messed up | |
40 | IMPLICIT tag and add f_enum.c which adds a2i, i2a for ENUMERATED. | |
41 | [Steve Henson] | |
42 | ||
bceacf93 DSH |
43 | *) Preliminary support for ENUMERATED type. This is largely copied from the |
44 | INTEGER code. | |
45 | [Steve Henson] | |
46 | ||
351d8998 MC |
47 | *) Add new function, EVP_MD_CTX_copy() to replace frequent use of memcpy. |
48 | [Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)] | |
49 | ||
b621d772 RE |
50 | *) Make sure `make rehash' target really finds the `openssl' program. |
51 | [Ralf S. Engelschall, Matthias Loepfe <Matthias.Loepfe@adnovum.ch>] | |
52 | ||
a96e7810 BL |
53 | *) Squeeze another 7% of speed out of MD5 assembler, at least on a P2. I'd |
54 | like to hear about it if this slows down other processors. | |
55 | [Ben Laurie] | |
56 | ||
e04a6c2b RE |
57 | *) Add CygWin32 platform information to Configure script. |
58 | [Alan Batie <batie@aahz.jf.intel.com>] | |
59 | ||
0172f988 RE |
60 | *) Fixed ms/32all.bat script: `no_asm' -> `no-asm' |
61 | [Rainer W. Gerling <gerling@mpg-gv.mpg.de>] | |
79dfa975 DSH |
62 | |
63 | *) New program nseq to manipulate netscape certificate sequences | |
64 | [Steve Henson] | |
320a14cb | 65 | |
9fe84296 DSH |
66 | *) Modify crl2pkcs7 so it supports multiple -certfile arguments. Fix a |
67 | few typos. | |
68 | [Steve Henson] | |
69 | ||
a0a54079 MC |
70 | *) Fixes to BN code. Previously the default was to define BN_RECURSION |
71 | but the BN code had some problems that would cause failures when | |
72 | doing certificate verification and some other functions. | |
73 | [Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)] | |
74 | ||
92c046ca DSH |
75 | *) Add ASN1 and PEM code to support netscape certificate sequences. |
76 | [Steve Henson] | |
77 | ||
79dfa975 DSH |
78 | *) Add ASN1 and PEM code to support netscape certificate sequences. |
79 | [Steve Henson] | |
80 | ||
a27598bf DSH |
81 | *) Add several PKIX and private extended key usage OIDs. |
82 | [Steve Henson] | |
83 | ||
b2347661 DSH |
84 | *) Modify the 'ca' program to handle the new extension code. Modify |
85 | openssl.cnf for new extension format, add comments. | |
86 | [Steve Henson] | |
87 | ||
f317aa4c DSH |
88 | *) More X509 V3 changes. Fix typo in v3_bitstr.c. Add support to 'req' |
89 | and add a sample to openssl.cnf so req -x509 now adds appropriate | |
90 | CA extensions. | |
91 | [Steve Henson] | |
92 | ||
834eeef9 DSH |
93 | *) Continued X509 V3 changes. Add to other makefiles, integrate with the |
94 | error code, add initial support to X509_print() and x509 application. | |
f317aa4c | 95 | [Steve Henson] |
834eeef9 | 96 | |
9aeaf1b4 DSH |
97 | *) Takes a deep breath and start addding X509 V3 extension support code. Add |
98 | files in crypto/x509v3. Move original stuff to crypto/x509v3/old. All this | |
99 | stuff is currently isolated and isn't even compiled yet. | |
100 | [Steve Henson] | |
101 | ||
9b5cc156 DSH |
102 | *) Continuing patches for GeneralizedTime. Fix up certificate and CRL |
103 | ASN1 to use ASN1_TIME and modify print routines to use ASN1_TIME_print. | |
104 | Removed the versions check from X509 routines when loading extensions: | |
105 | this allows certain broken certificates that don't set the version | |
106 | properly to be processed. | |
107 | [Steve Henson] | |
108 | ||
8039257d BL |
109 | *) Deal with irritating shit to do with dependencies, in YAAHW (Yet Another |
110 | Ad Hoc Way) - Makefile.ssls now all contain local dependencies, which | |
111 | can still be regenerated with "make depend". | |
112 | [Ben Laurie] | |
113 | ||
b13a1554 BL |
114 | *) Spelling mistake in C version of CAST-128. |
115 | [Ben Laurie, reported by Jeremy Hylton <jeremy@cnri.reston.va.us>] | |
116 | ||
6c8abdd7 DSH |
117 | *) Changes to the error generation code. The perl script err-code.pl |
118 | now reads in the old error codes and retains the old numbers, only | |
119 | adding new ones if necessary. It also only changes the .err files if new | |
120 | codes are added. The makefiles have been modified to only insert errors | |
121 | when needed (to avoid needlessly modifying header files). This is done | |
122 | by only inserting errors if the .err file is newer than the auto generated | |
123 | C file. To rebuild all the error codes from scratch (the old behaviour) | |
124 | either modify crypto/Makefile.ssl to pass the -regen flag to err_code.pl | |
125 | or delete all the .err files. | |
9b5cc156 | 126 | [Steve Henson] |
6c8abdd7 | 127 | |
649cdb7b BL |
128 | *) CAST-128 was incorrectly implemented for short keys. The C version has |
129 | been fixed, but is untested. The assembler versions are also fixed, but | |
130 | new assembler HAS NOT BEEN GENERATED FOR WIN32 - the Makefile needs fixing | |
131 | to regenerate it if needed. | |
132 | [Ben Laurie, reported (with fix for C version) by Jun-ichiro itojun | |
133 | Hagino <itojun@kame.net>] | |
134 | ||
135 | *) File was opened incorrectly in randfile.c. | |
136 |