[thirdparty/openssl.git] / CHANGES


 OpenSSL CHANGES
 _______________


 Changes between 0.9.3a and 0.9.4

  *) Instead of "mkdir -p", which is not fully portable, use new
     Perl script "util/mkdir-p.pl".

  *) Rewrite the way password based encryption (PBE) is handled. It used to
     assume that the ASN1 AlgorithmIdentifier parameter was a PBEParameter
     structure. This was true for the PKCS#5 v1.5 and PKCS#12 PBE algorithms
     but doesn't apply to PKCS#5 v2.0 where it can be something else. Now
     the 'parameter' field of the AlgorithmIdentifier is passed to the
     underlying key generation function so it must do its own ASN1 parsing.
     This has also changed the EVP_PBE_CipherInit() function which now has a
     'parameter' argument instead of literal salt and iteration count values
     and the function EVP_PBE_ALGOR_CipherInit() has been deleted.
     [Steve Henson]

  *) Support for PKCS#5 v1.5 compatible password based encryption algorithms
     and PKCS#8 functionality. New 'pkcs8' application linked to openssl.
     Needed to change the PEM_STRING_EVP_PKEY value which was just "PRIVATE
     KEY" because this clashed with PKCS#8 unencrypted string. Since this
     value was just used as a "magic string" and not used directly its
     value doesn't matter.
     [Steve Henson]

  *) Introduce some semblance of const correctness to BN. Shame C doesn't
     support mutable.
     [Ben Laurie]

  *) "linux-sparc64" configuration (ultrapenguin).
     [Ray Miller <ray.miller@oucs.ox.ac.uk>]
     "linux-sparc" configuration.
     [Christian Forster <fo@hawo.stw.uni-erlangen.de>]

  *) config now generates no-xxx options for missing ciphers.
Commit	Line	Data
651d0aff	1
f1c236f8	2	OpenSSL CHANGES
651d0aff RE	3	_______________
	4
	5
0cceb1c7 BM	6	Changes between 0.9.3a and 0.9.4
0cceb1c7 BM	7
d4443edc BM	8	*) Instead of "mkdir -p", which is not fully portable, use new
	9	Perl script "util/mkdir-p.pl".
	10
69cbf468 DSH	11	*) Rewrite the way password based encryption (PBE) is handled. It used to
	12	assume that the ASN1 AlgorithmIdentifier parameter was a PBEParameter
	13	structure. This was true for the PKCS#5 v1.5 and PKCS#12 PBE algorithms
	14	but doesn't apply to PKCS#5 v2.0 where it can be something else. Now
	15	the 'parameter' field of the AlgorithmIdentifier is passed to the
	16	underlying key generation function so it must do its own ASN1 parsing.
	17	This has also changed the EVP_PBE_CipherInit() function which now has a
	18	'parameter' argument instead of literal salt and iteration count values
	19	and the function EVP_PBE_ALGOR_CipherInit() has been deleted.
	20	[Steve Henson]
	21
ef8335d9	22	*) Support for PKCS#5 v1.5 compatible password based encryption algorithms
e7871ffa DSH	23	and PKCS#8 functionality. New 'pkcs8' application linked to openssl.
	24	Needed to change the PEM_STRING_EVP_PKEY value which was just "PRIVATE
	25	KEY" because this clashed with PKCS#8 unencrypted string. Since this
	26	value was just used as a "magic string" and not used directly its
	27	value doesn't matter.
ef8335d9 DSH	28	[Steve Henson]
ef8335d9 DSH	29
84c15db5 BL	30	*) Introduce some semblance of const correctness to BN. Shame C doesn't
	31	support mutable.
	32	[Ben Laurie]
	33
272c9333	34	*) "linux-sparc64" configuration (ultrapenguin).
885982dc	35	[Ray Miller <ray.miller@oucs.ox.ac.uk>]
272c9333 BM	36	"linux-sparc" configuration.
272c9333 BM	37	[Christian Forster <fo@hawo.stw.uni-erlangen.de>]
885982dc	38
a53955d8 UM	39	*) config now generates no-xxx options for missing ciphers.
	40