[thirdparty/openssl.git] / CHANGES


 OpenSSL CHANGES
 _______________


 Changes between 0.9.1c and 0.9.2

  *) X509_name_add_entry() freed the wrong thing after an error.
     [Arne Ansper <arne@ats.cyber.ee>]

  *) rsa_eay.c would attempt to free a NULL context.
     [Arne Ansper <arne@ats.cyber.ee>]

  *) BIO_s_socket() had a broken should_retry() on Windoze.
     [Arne Ansper <arne@ats.cyber.ee>]

  *) BIO_f_buffer() didn't pass on BIO_CTRL_FLUSH.
     [Arne Ansper <arne@ats.cyber.ee>]

  *) Make sure the already existing X509_STORE->depth variable is initialized
     in X509_STORE_new(), but document the fact that this variable is still
     unused in the certificate verification process.
     [Ralf S. Engelschall]

  *) Fix the various library and apps files to free up pkeys obtained from
     EVP_PUBKEY_get() et al. Also allow x509.c to handle netscape extensions.
     [Steve Henson]

  *) Fix reference counting in X509_PUBKEY_get(). This makes
     demos/maurice/example2.c work, amongst others, probably.
     [Steve Henson and Ben Laurie]

  *) First cut of a cleanup for apps/. First the `ssleay' program is now named
     `openssl' and second, the shortcut symlinks for the `openssl <command>'
     are no longer created. This way we have a single and consistent command
     line interface `openssl <command>', similar to `cvs <command>'.
     [Ralf S. Engelschall, Paul Sutton and Ben Laurie]

  *) ca.c: move test for DSA keys inside #ifndef NO_DSA. Make pubkey
     BIT STRING wrapper always have zero unused bits.
     [Steve Henson]

  *) Add CA.pl, perl version of CA.sh, add extended key usage OID.
     [Steve Henson]

  *) Make the top-level INSTALL documentation easier to understand.
     [Paul Sutton]

  *) Makefiles updated to exit if an error occurs in a sub-directory
     make (including if user presses ^C) [Paul Sutton]

  *) Make Montgomery context stuff explicit in RSA data structure.
     [Ben Laurie]

  *) Fix build order of pem and err to allow for generated pem.h.
     [Ben Laurie]

  *) Fix renumbering bug in X509_NAME_delete_entry().
     [Ben Laurie]

  *) Enhanced the err-ins.pl script so it makes the error library number 
     global and can add a library name. This is needed for external ASN1 and
     other error libraries.
     [Steve Henson]

  *) Fixed sk_insert which never worked properly.
     [Steve Henson]

  *) Fix ASN1 macros so they can handle indefinite length construted 
     EXPLICIT tags. Some non standard certificates use these: they can now
     be read in.
     [Steve Henson]

  *) Merged the various old/obsolete SSLeay documentation files (doc/xxx.doc)
     into a single doc/ssleay.txt bundle. This way the information is still
     preserved but no longer messes up this directory. Now it's new room for
     the new set of documenation files.
     [Ralf S. Engelschall]

  *) SETs were incorrectly DER encoded. This was a major pain, because they
     shared code with SEQUENCEs, which aren't coded the same. This means that
     almost everything to do with SETs or SEQUENCEs has either changed name or
     number of arguments.
     [Ben Laurie, based on a partial fix by GP Jayan <gp@nsj.co.jp>]

  *) Fix test data to work with the above.
     [Ben Laurie]

  *) Fix the RSA header declarations that hid a bug I fixed in 0.9.0b but
     was already fixed by Eric for 0.9.1 it seems.
Commit	Line	Data
651d0aff	1
f1c236f8	2	OpenSSL CHANGES
651d0aff RE	3	_______________
	4
	5
9cb0969f	6	Changes between 0.9.1c and 0.9.2
320a14cb	7
e416ad97 BL	8	*) X509_name_add_entry() freed the wrong thing after an error.
	9	[Arne Ansper <arne@ats.cyber.ee>]
	10
4a18cddd BL	11	*) rsa_eay.c would attempt to free a NULL context.
	12	[Arne Ansper <arne@ats.cyber.ee>]
	13
bb65e20b BL	14	*) BIO_s_socket() had a broken should_retry() on Windoze.
	15	[Arne Ansper <arne@ats.cyber.ee>]
	16
b5e406f7 BL	17	*) BIO_f_buffer() didn't pass on BIO_CTRL_FLUSH.
	18	[Arne Ansper <arne@ats.cyber.ee>]
	19
cb0f35d7 RE	20	*) Make sure the already existing X509_STORE->depth variable is initialized
	21	in X509_STORE_new(), but document the fact that this variable is still
	22	unused in the certificate verification process.
	23	[Ralf S. Engelschall]
	24
cfcf6453 DSH	25	*) Fix the various library and apps files to free up pkeys obtained from
	26	EVP_PUBKEY_get() et al. Also allow x509.c to handle netscape extensions.
	27	[Steve Henson]
	28
cdbb8c2f BL	29	*) Fix reference counting in X509_PUBKEY_get(). This makes
	30	demos/maurice/example2.c work, amongst others, probably.
	31	[Steve Henson and Ben Laurie]
	32
06d5b162 RE	33	*) First cut of a cleanup for apps/. First the `ssleay' program is now named
	34	`openssl' and second, the shortcut symlinks for the `openssl <command>'
	35	are no longer created. This way we have a single and consistent command
	36	line interface `openssl <command>', similar to `cvs <command>'.
cdbb8c2f	37	[Ralf S. Engelschall, Paul Sutton and Ben Laurie]
06d5b162	38
c35f549e DSH	39	*) ca.c: move test for DSA keys inside #ifndef NO_DSA. Make pubkey
	40	BIT STRING wrapper always have zero unused bits.
	41	[Steve Henson]
	42
ebc828ca DSH	43	*) Add CA.pl, perl version of CA.sh, add extended key usage OID.
	44	[Steve Henson]
	45
79e259e3 PS	46	*) Make the top-level INSTALL documentation easier to understand.
	47	[Paul Sutton]
	48
56ee3117 PS	49	*) Makefiles updated to exit if an error occurs in a sub-directory
	50	make (including if user presses ^C) [Paul Sutton]
	51
6063b27b BL	52	*) Make Montgomery context stuff explicit in RSA data structure.
	53	[Ben Laurie]
	54
	55	*) Fix build order of pem and err to allow for generated pem.h.
	56	[Ben Laurie]
	57
	58	*) Fix renumbering bug in X509_NAME_delete_entry().
	59	[Ben Laurie]
	60
792a9002	61	*) Enhanced the err-ins.pl script so it makes the error library number
	62	global and can add a library name. This is needed for external ASN1 and
	63	other error libraries.
	64	[Steve Henson]
	65
	66	*) Fixed sk_insert which never worked properly.
	67	[Steve Henson]
	68
	69	*) Fix ASN1 macros so they can handle indefinite length construted
	70	EXPLICIT tags. Some non standard certificates use these: they can now
	71	be read in.
	72	[Steve Henson]
	73
ce72df1c RE	74	*) Merged the various old/obsolete SSLeay documentation files (doc/xxx.doc)
	75	into a single doc/ssleay.txt bundle. This way the information is still
	76	preserved but no longer messes up this directory. Now it's new room for
	77	the new set of documenation files.
	78	[Ralf S. Engelschall]
	79
4098e89c BL	80	*) SETs were incorrectly DER encoded. This was a major pain, because they
	81	shared code with SEQUENCEs, which aren't coded the same. This means that
	82	almost everything to do with SETs or SEQUENCEs has either changed name or
	83	number of arguments.
	84	[Ben Laurie, based on a partial fix by GP Jayan <gp@nsj.co.jp>]
	85
	86	*) Fix test data to work with the above.
	87	[Ben Laurie]
	88
03f8b042 BL	89	*) Fix the RSA header declarations that hid a bug I fixed in 0.9.0b but
03f8b042 BL	90	was already fixed by Eric for 0.9.1 it seems.
88fce979	91