[thirdparty/openssl.git] / STATUS


  OpenSSL STATUS                           Last modified at
  ______________                           $Date: 2003/02/28 15:17:45 $

  DEVELOPMENT STATE

    o  OpenSSL 0.9.8:  Under development...
    o  OpenSSL 0.9.7a: Released on February  19th, 2003
    o  OpenSSL 0.9.7:  Released on December  31st, 2002
    o  OpenSSL 0.9.6i: Released on February  19th, 2003
    o  OpenSSL 0.9.6h: Released on December   5th, 2002
    o  OpenSSL 0.9.6g: Released on August     9th, 2002
    o  OpenSSL 0.9.6f: Released on August     8th, 2002
    o  OpenSSL 0.9.6e: Released on July      30th, 2002
    o  OpenSSL 0.9.6d: Released on May        9th, 2002
    o  OpenSSL 0.9.6c: Released on December  21st, 2001
    o  OpenSSL 0.9.6b: Released on July       9th, 2001
    o  OpenSSL 0.9.6a: Released on April      5th, 2001
    o  OpenSSL 0.9.6:  Released on September 24th, 2000
    o  OpenSSL 0.9.5a: Released on April      1st, 2000
    o  OpenSSL 0.9.5:  Released on February  28th, 2000
    o  OpenSSL 0.9.4:  Released on August    09th, 1999
    o  OpenSSL 0.9.3a: Released on May       29th, 1999
    o  OpenSSL 0.9.3:  Released on May       25th, 1999
    o  OpenSSL 0.9.2b: Released on March     22th, 1999
    o  OpenSSL 0.9.1c: Released on December  23th, 1998

  [See also http://www.openssl.org/support/rt2.html]

  RELEASE SHOWSTOPPERS

    o 

  AVAILABLE PATCHES

    o 

  IN PROGRESS

    o Steve is currently working on (in no particular order):
        ASN1 code redesign, butchery, replacement.
        OCSP
        EVP cipher enhancement.
        Enhanced certificate chain verification.
	Private key, certificate and CRL API and implementation.
	Developing and bugfixing PKCS#7 (S/MIME code).
        Various X509 issues: character sets, certificate request extensions.
    o Geoff and Richard are currently working on:
	ENGINE (the new code that gives hardware support among others).
    o Richard is currently working on:
	UI (User Interface)
	UTIL (a new set of library functions to support some higher level
	      functionality that is currently missing).
	Shared library support for VMS.
	Kerberos 5 authentication (Heimdal)
	Constification
	Compression
	Attribute Certificate support
	Certificate Pair support
	Storage Engines (primarly an LDAP storage engine)
	Certificate chain validation with full RFC 3280 compatibility

  NEEDS PATCH

    o  0.9.8-dev: COMPLEMENTOFALL and COMPLEMENTOFDEFAULT do not
       handle ECCdraft cipher suites correctly.

    o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file

    o  "OpenSSL STATUS" is never up-to-date.

  OPEN ISSUES

    o  The Makefile hierarchy and build mechanism is still not a round thing:

       1. The config vs. Configure scripts
          It's the same nasty situation as for Apache with APACI vs.
          src/Configure. It confuses.
          Suggestion: Merge Configure and config into a single configure
                      script with a Autoconf style interface ;-) and remove
                      Configure and config. Or even let us use GNU Autoconf
                      itself. Then we can avoid a lot of those platform checks
                      which are currently in Configure.

    o  Support for Shared Libraries has to be added at least
       for the major Unix platforms. The details we can rip from the stuff
       Ralf has done for the Apache src/Configure script. Ben wants the
       solution to be really simple.

       Status: Ralf will look how we can easily incorporate the
               compiler PIC and linker DSO flags from Apache
               into the OpenSSL Configure script.

               Ulf: +1 for using GNU autoconf and libtool (but not automake,
                    which apparently is not flexible enough to generate
                    libcrypto)

  WISHES

    o  Add variants of DH_generate_parameters() and BN_generate_prime() [etc?]
       where the callback function can request that the function be aborted.
       [Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>]

    o  SRP in TLS.
       [wished by:
        Dj <derek@yo.net>, Tom Wu <tom@arcot.com>,
        Tom Holroyd <tomh@po.crl.go.jp>]

       See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt
       as well as http://www-cs-students.stanford.edu/~tjw/srp/.

       Tom Holroyd tells us there is a SRP patch for OpenSSH at
       http://members.tripod.com/professor_tom/archives/, that could
       be useful.
Commit	Line	Data
	1
	2	OpenSSL STATUS Last modified at
	3	______________ $Date: 2003/02/28 15:17:45 $
	4
	5	DEVELOPMENT STATE
	6
	7	o OpenSSL 0.9.8: Under development...
	8	o OpenSSL 0.9.7a: Released on February 19th, 2003
	9	o OpenSSL 0.9.7: Released on December 31st, 2002
	10	o OpenSSL 0.9.6i: Released on February 19th, 2003
	11	o OpenSSL 0.9.6h: Released on December 5th, 2002
	12	o OpenSSL 0.9.6g: Released on August 9th, 2002
	13	o OpenSSL 0.9.6f: Released on August 8th, 2002
	14	o OpenSSL 0.9.6e: Released on July 30th, 2002
	15	o OpenSSL 0.9.6d: Released on May 9th, 2002
	16	o OpenSSL 0.9.6c: Released on December 21st, 2001
	17	o OpenSSL 0.9.6b: Released on July 9th, 2001
	18	o OpenSSL 0.9.6a: Released on April 5th, 2001
	19	o OpenSSL 0.9.6: Released on September 24th, 2000
	20	o OpenSSL 0.9.5a: Released on April 1st, 2000
	21	o OpenSSL 0.9.5: Released on February 28th, 2000
	22	o OpenSSL 0.9.4: Released on August 09th, 1999
	23	o OpenSSL 0.9.3a: Released on May 29th, 1999
	24	o OpenSSL 0.9.3: Released on May 25th, 1999
	25	o OpenSSL 0.9.2b: Released on March 22th, 1999
	26	o OpenSSL 0.9.1c: Released on December 23th, 1998
	27
	28	[See also http://www.openssl.org/support/rt2.html]
	29
	30	RELEASE SHOWSTOPPERS
	31
	32	o
	33
	34	AVAILABLE PATCHES
	35
	36	o
	37
	38	IN PROGRESS
	39
	40	o Steve is currently working on (in no particular order):
	41	ASN1 code redesign, butchery, replacement.
	42	OCSP
	43	EVP cipher enhancement.
	44	Enhanced certificate chain verification.
	45	Private key, certificate and CRL API and implementation.
	46	Developing and bugfixing PKCS#7 (S/MIME code).
	47	Various X509 issues: character sets, certificate request extensions.
	48	o Geoff and Richard are currently working on:
	49	ENGINE (the new code that gives hardware support among others).
	50	o Richard is currently working on:
	51	UI (User Interface)
	52	UTIL (a new set of library functions to support some higher level
	53	functionality that is currently missing).
	54	Shared library support for VMS.
	55	Kerberos 5 authentication (Heimdal)
	56	Constification
	57	Compression
	58	Attribute Certificate support
	59	Certificate Pair support
	60	Storage Engines (primarly an LDAP storage engine)
	61	Certificate chain validation with full RFC 3280 compatibility
	62
	63	NEEDS PATCH
	64
	65	o 0.9.8-dev: COMPLEMENTOFALL and COMPLEMENTOFDEFAULT do not
	66	handle ECCdraft cipher suites correctly.
	67
	68	o apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
	69
	70	o "OpenSSL STATUS" is never up-to-date.
	71
	72	OPEN ISSUES
	73
	74	o The Makefile hierarchy and build mechanism is still not a round thing:
	75
	76	1. The config vs. Configure scripts
	77	It's the same nasty situation as for Apache with APACI vs.
	78	src/Configure. It confuses.
	79	Suggestion: Merge Configure and config into a single configure
	80	script with a Autoconf style interface ;-) and remove
	81	Configure and config. Or even let us use GNU Autoconf
	82	itself. Then we can avoid a lot of those platform checks
	83	which are currently in Configure.
	84
	85	o Support for Shared Libraries has to be added at least
	86	for the major Unix platforms. The details we can rip from the stuff
	87	Ralf has done for the Apache src/Configure script. Ben wants the
	88	solution to be really simple.
	89
	90	Status: Ralf will look how we can easily incorporate the
	91	compiler PIC and linker DSO flags from Apache
	92	into the OpenSSL Configure script.
	93
	94	Ulf: +1 for using GNU autoconf and libtool (but not automake,
	95	which apparently is not flexible enough to generate
	96	libcrypto)
	97
	98	WISHES
	99
	100	o Add variants of DH_generate_parameters() and BN_generate_prime() [etc?]
	101	where the callback function can request that the function be aborted.
	102	[Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>]
	103
	104	o SRP in TLS.
	105	[wished by:
	106	Dj <derek@yo.net>, Tom Wu <tom@arcot.com>,
	107	Tom Holroyd <tomh@po.crl.go.jp>]
	108
	109	See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt
	110	as well as http://www-cs-students.stanford.edu/~tjw/srp/.
	111
	112	Tom Holroyd tells us there is a SRP patch for OpenSSH at
	113	http://members.tripod.com/professor_tom/archives/, that could
	114	be useful.