[thirdparty/openssl.git] / CHANGES


 OpenSSL CHANGES
 _______________

 Changes between 0.9.5a and 0.9.6  [xx XXX 2000]

  *) Various fixes to use ASN1_TIME instead of ASN1_UTCTIME.
     Also change the functions X509_cmp_current_time() and
     X509_gmtime_adj() work with an ASN1_TIME structure,
     this will enable certificates using GeneralizedTime in validity
     dates to be checked.
     [Steve Henson]

  *) Make the NEG_PUBKEY_BUG code (which tolerates invalid
     negative public key encodings) on by default,
     NO_NEG_PUBKEY_BUG can be set to disable it.
     [Steve Henson]

  *) New function c2i_ASN1_OBJECT() which acts on ASN1_OBJECT
     content octets. An i2c_ASN1_OBJECT is unnecessary because
     the encoding can be trivially obtained from the structure.
     [Steve Henson]

  *) crypto/err.c locking bugfix: Use write locks (CRYPTO_w_[un]lock),
     not read locks (CRYPTO_r_[un]lock).
     [Bodo Moeller]

  *) A first attempt at creating official support for shared
     libraries through configuration.  I've kept it so the
     default is static libraries only, and the OpenSSL programs
     are always statically linked for now, but there are
     preparations for dynamic linking in place.
     This has been tested on Linux and True64.
     [Richard Levitte]

  *) Randomness polling function for Win9x, as described in:
     Peter Gutmann, Software Generation of Practically Strong
     Random Numbers.
Commit	Line	Data
651d0aff	1
f1c236f8	2	OpenSSL CHANGES
651d0aff RE	3	_______________
651d0aff RE	4
c90341a1 RL	5	Changes between 0.9.5a and 0.9.6 [xx XXX 2000]
c90341a1 RL	6
284ef5f3 DSH	7	*) Various fixes to use ASN1_TIME instead of ASN1_UTCTIME.
	8	Also change the functions X509_cmp_current_time() and
	9	X509_gmtime_adj() work with an ASN1_TIME structure,
	10	this will enable certificates using GeneralizedTime in validity
	11	dates to be checked.
	12	[Steve Henson]
	13
	14	*) Make the NEG_PUBKEY_BUG code (which tolerates invalid
	15	negative public key encodings) on by default,
	16	NO_NEG_PUBKEY_BUG can be set to disable it.
	17	[Steve Henson]
	18
	19	*) New function c2i_ASN1_OBJECT() which acts on ASN1_OBJECT
	20	content octets. An i2c_ASN1_OBJECT is unnecessary because
	21	the encoding can be trivially obtained from the structure.
	22	[Steve Henson]
	23
fa729135 BM	24	*) crypto/err.c locking bugfix: Use write locks (CRYPTO_w_[un]lock),
	25	not read locks (CRYPTO_r_[un]lock).
	26	[Bodo Moeller]
	27
b436a982 RL	28	*) A first attempt at creating official support for shared
	29	libraries through configuration. I've kept it so the
	30	default is static libraries only, and the OpenSSL programs
	31	are always statically linked for now, but there are
	32	preparations for dynamic linking in place.
	33	This has been tested on Linux and True64.
	34	[Richard Levitte]
	35
c0722725 UM	36	*) Randomness polling function for Win9x, as described in:
	37	Peter Gutmann, Software Generation of Practically Strong
	38	Random Numbers.
	39