[thirdparty/openssl.git] / CHANGES


 OpenSSL CHANGES
 _______________


 Changes between 0.9.2b and 0.9.3  [XX May 1999]
                                   [I suggest using the same format for the
                                   date as in opensslv.h.  0.9.1c used
                                   hyphens in the date, so I wrote
                                   [23-Dec-1998] down below; but in later
                                   versions, these hyphens are gone.]

  *) Change type of various DES function arguments from des_cblock
     (which means, in function argument declarations, pointer to char)
     to des_cblock * (meaning pointer to array with 8 char elements),
     which allows the compiler to do more typechecking; it was like
     that back in SSLeay, but with lots of ugly casts.

     Introduce new type const_des_cblock.
     [Bodo Moeller]

  *) Reorganise the PKCS#7 library and get rid of some of the more obvious
     problems: find RecipientInfo structure that matches recipient certificate
     and initialise the ASN1 structures properly based on passed cipher.
     [Steve Henson]

  *) Belatedly make the BN tests actually check the results.
     [Ben Laurie]

  *) Fix the encoding and decoding of negative ASN1 INTEGERS and conversion
     to and from BNs: it was completely broken. New compilation option
     NEG_PUBKEY_BUG to allow for some broken certificates that encode public
     key elements as negative integers.
     [Steve Henson]

  *) Reorganize and speed up MD5.
     [Andy Polyakov <appro@fy.chalmers.se>]

  *) VMS support.
     [Richard Levitte <richard@levitte.org>]

  *) New option -out to asn1parse to allow the parsed structure to be
     output to a file. This is most useful when combined with the -strparse
     option to examine the output of things like OCTET STRINGS.
     [Steve Henson]

  *) Make SSL library a little more fool-proof by not requiring any longer
     that SSL_set_{accept,connect}_state be called before
     SSL_{accept,connect} may be used (SSL_set_..._state is omitted
     in many applications because usually everything *appeared* to work as
     intended anyway -- now it really works as intended).
     [Bodo Moeller]

  *) Move openssl.cnf out of lib/.
Commit	Line	Data
651d0aff	1
f1c236f8	2	OpenSSL CHANGES
651d0aff RE	3	_______________
	4
	5
1b24cca9 BM	6	Changes between 0.9.2b and 0.9.3 [XX May 1999]
	7	[I suggest using the same format for the
	8	date as in opensslv.h. 0.9.1c used
	9	hyphens in the date, so I wrote
	10	[23-Dec-1998] down below; but in later
	11	versions, these hyphens are gone.]
7d7d2cbc	12
55519bbb	13	*) Change type of various DES function arguments from des_cblock
f43c8149	14	(which means, in function argument declarations, pointer to char)
55519bbb BM	15	to des_cblock * (meaning pointer to array with 8 char elements),
	16	which allows the compiler to do more typechecking; it was like
	17	that back in SSLeay, but with lots of ugly casts.
	18
	19	Introduce new type const_des_cblock.
	20	[Bodo Moeller]
	21
84fa704c DSH	22	*) Reorganise the PKCS#7 library and get rid of some of the more obvious
	23	problems: find RecipientInfo structure that matches recipient certificate
	24	and initialise the ASN1 structures properly based on passed cipher.
	25	[Steve Henson]
	26
62bad771 BL	27	*) Belatedly make the BN tests actually check the results.
	28	[Ben Laurie]
	29
1ad2ecb6 DSH	30	*) Fix the encoding and decoding of negative ASN1 INTEGERS and conversion
	31	to and from BNs: it was completely broken. New compilation option
	32	NEG_PUBKEY_BUG to allow for some broken certificates that encode public
	33	key elements as negative integers.
	34	[Steve Henson]
	35
bd3576d2 UM	36	*) Reorganize and speed up MD5.
	37	[Andy Polyakov <appro@fy.chalmers.se>]
	38
7d7d2cbc UM	39	*) VMS support.
7d7d2cbc UM	40	[Richard Levitte <richard@levitte.org>]
1b276f30	41
f5eac85e DSH	42	*) New option -out to asn1parse to allow the parsed structure to be
	43	output to a file. This is most useful when combined with the -strparse
	44	option to examine the output of things like OCTET STRINGS.
	45	[Steve Henson]
	46
b31b04d9 BM	47	*) Make SSL library a little more fool-proof by not requiring any longer
	48	that SSL_set_{accept,connect}_state be called before
	49	SSL_{accept,connect} may be used (SSL_set_..._state is omitted
	50	in many applications because usually everything appeared to work as
	51	intended anyway -- now it really works as intended).
	52	[Bodo Moeller]
	53
d5a2ea4b UM	54	*) Move openssl.cnf out of lib/.
	55