[thirdparty/openssl.git] / CHANGES


 OpenSSL CHANGES
 _______________

 Changes between 0.9.4 and 0.9.5  [xx XXX 1999]

  *) Minor change to 'x509' utility. The -CAcreateserial option now uses 1
     for the first serial number and places 2 in the serial number file. This
     avoids problems when the root CA is created with serial number zero and
     the first user certificate has the same issuer name and serial number
     as the root CA.
     [Steve Henson]

  *) Fixes to X509_ATTRIBUTE utilities, change the 'req' program so it uses
     the new code. Add documentation for this stuff.
     [Steve Henson]

  *) Changes to X509_ATTRIBUTE utilities. These have been renamed from
     X509_*() to X509at_*() on the grounds that they don't handle X509
     structures and behave in an analagous way to the X509v3 functions:
     they shouldn't be called directly but wrapper functions should be used
     instead.

     So we also now have some wrapper functions that call the X509at functions
     when passed certificate requests. (TO DO: similar things can be done with
     PKCS#7 signed and unsigned attributes, PKCS#12 attributes and a few other
     things. Some of these need some d2i or i2d and print functionality
     because they handle more complex structures.)
     [Steve Henson]

  *) Add missing #ifndefs that caused missing symbols when building libssl
     as a shared library without RSA.  Use #ifndef NO_SSL2 instead of
     NO_RSA in ssl/s2*.c.
Commit	Line	Data
651d0aff	1
f1c236f8	2	OpenSSL CHANGES
651d0aff RE	3	_______________
651d0aff RE	4
d91e201e RE	5	Changes between 0.9.4 and 0.9.5 [xx XXX 1999]
d91e201e RE	6
8100490a DSH	7	*) Minor change to 'x509' utility. The -CAcreateserial option now uses 1
	8	for the first serial number and places 2 in the serial number file. This
	9	avoids problems when the root CA is created with serial number zero and
	10	the first user certificate has the same issuer name and serial number
	11	as the root CA.
	12	[Steve Henson]
	13
6e6bc352 DSH	14	*) Fixes to X509_ATTRIBUTE utilities, change the 'req' program so it uses
	15	the new code. Add documentation for this stuff.
	16	[Steve Henson]
	17
77b47b90 DSH	18	*) Changes to X509_ATTRIBUTE utilities. These have been renamed from
	19	X509_() to X509at_() on the grounds that they don't handle X509
	20	structures and behave in an analagous way to the X509v3 functions:
	21	they shouldn't be called directly but wrapper functions should be used
	22	instead.
	23
	24	So we also now have some wrapper functions that call the X509at functions
	25	when passed certificate requests. (TO DO: similar things can be done with
	26	PKCS#7 signed and unsigned attributes, PKCS#12 attributes and a few other
	27	things. Some of these need some d2i or i2d and print functionality
6e6bc352	28	because they handle more complex structures.)
77b47b90 DSH	29	[Steve Henson]
77b47b90 DSH	30
aa82db4f UM	31	*) Add missing #ifndefs that caused missing symbols when building libssl
	32	as a shared library without RSA. Use #ifndef NO_SSL2 instead of
	33	NO_RSA in ssl/s2*.c.
	34