[thirdparty/openssl.git] / CHANGES

 OpenSSL CHANGES
 _______________

 Changes between 0.9.6 and 0.9.7  [xx XXX 2000]

  *) Added Broadcom "ubsec" ENGINE to OpenSSL.
     [Broadcom, tweaked and integrated by Geoff Thorpe]

  *) Move common extension printing code to new function
     X509V3_print_extensions(). Reorganise OCSP print routines and
     implement some needed OCSP ASN1 functions.
     [Steve Henson]

  *) New function X509_signature_print() to remove duplication in some
     print routines.
     [Steve Henson]

  *) Add a special meaning when SET OF and SEQUENCE OF flags are both
     set (this was treated exactly the same as SET OF previously). This
     is used to reorder the STACK representing the structure to match the
     encoding. This will be used to get round a problem where a PKCS7
     structure which was signed could not be verified because the STACK
     order did not reflect the encoded order.
     [Steve Henson]

  *) Reimplement the OCSP ASN1 module using the new code.
     [Steve Henson]

  *) Update the X509V3 code to permit the use of an ASN1_ITEM structure
     for its ASN1 operations. The old style function pointers still exist
     for now but they will eventually go away.
     [Steve Henson]

  *) Merge in replacement ASN1 code from the ASN1 branch. This almost
     completely replaces the old ASN1 functionality.
     [Steve Henson]

  *) Change BN_mod_exp_recp so that negative moduli are tolerated
     (the sign is ignored).  Similarly, ignore the sign in BN_MONT_CTX_set
     so that BN_mod_exp_mont and BN_mod_exp_mont_word work
     for negative moduli.
     [Bodo Moeller]

  *) Fix BN_uadd and BN_usub: Always return non-negative results instead
     of not touching the result's sign bit.
     [Bodo Moeller]

  *) BN_div bugfix: If the result is 0, the sign (res->neg) must not be
     set.
     [Bodo Moeller]

  *) Changed the LHASH code to use prototypes for callbacks, and created
     macros to declare and implement thin (optionally static) functions
     that provide type-safety and avoid function pointer casting for the
     type-specific callbacks.
     [Geoff Thorpe]

  *) Use better test patterns in bntest.
Commit	Line	Data
f1c236f8	1	OpenSSL CHANGES
651d0aff RE	2	_______________
651d0aff RE	3
c5e8580e RL	4	Changes between 0.9.6 and 0.9.7 [xx XXX 2000]
c5e8580e RL	5
2a86064f GT	6	*) Added Broadcom "ubsec" ENGINE to OpenSSL.
	7	[Broadcom, tweaked and integrated by Geoff Thorpe]
	8
2c15d426 DSH	9	*) Move common extension printing code to new function
	10	X509V3_print_extensions(). Reorganise OCSP print routines and
	11	implement some needed OCSP ASN1 functions.
	12	[Steve Henson]
	13
de487514 DSH	14	*) New function X509_signature_print() to remove duplication in some
	15	print routines.
	16	[Steve Henson]
	17
06db4253 DSH	18	*) Add a special meaning when SET OF and SEQUENCE OF flags are both
	19	set (this was treated exactly the same as SET OF previously). This
	20	is used to reorder the STACK representing the structure to match the
	21	encoding. This will be used to get round a problem where a PKCS7
	22	structure which was signed could not be verified because the STACK
	23	order did not reflect the encoded order.
	24	[Steve Henson]
	25
36f554d4 DSH	26	*) Reimplement the OCSP ASN1 module using the new code.
	27	[Steve Henson]
	28
2aff7727 DSH	29	*) Update the X509V3 code to permit the use of an ASN1_ITEM structure
	30	for its ASN1 operations. The old style function pointers still exist
	31	for now but they will eventually go away.
	32	[Steve Henson]
	33
9d6b1ce6 DSH	34	*) Merge in replacement ASN1 code from the ASN1 branch. This almost
	35	completely replaces the old ASN1 functionality.
	36	[Steve Henson]
	37
8dea52fa BM	38	*) Change BN_mod_exp_recp so that negative moduli are tolerated
	39	(the sign is ignored). Similarly, ignore the sign in BN_MONT_CTX_set
	40	so that BN_mod_exp_mont and BN_mod_exp_mont_word work
	41	for negative moduli.
	42	[Bodo Moeller]
	43
	44	*) Fix BN_uadd and BN_usub: Always return non-negative results instead
	45	of not touching the result's sign bit.
	46	[Bodo Moeller]
	47
80d89e6a BM	48	*) BN_div bugfix: If the result is 0, the sign (res->neg) must not be
	49	set.
	50	[Bodo Moeller]
	51
f1919c3d GT	52	*) Changed the LHASH code to use prototypes for callbacks, and created
	53	macros to declare and implement thin (optionally static) functions
	54	that provide type-safety and avoid function pointer casting for the
	55	type-specific callbacks.
	56	[Geoff Thorpe]
	57
1946cd8b UM	58	*) Use better test patterns in bntest.
	59