summaryrefslogtreecommitdiffstats
path: root/CHANGES
AgeCommit message (Collapse)Author
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie
2002-11-09X509_NAME_cmp() now compares PrintableString and emailAddress with a value ↵Richard Levitte
of type ia5String correctly. PR: 244
2002-11-04implement and use new macros BN_get_sign(), BN_set_sign()Bodo Möller
Submitted by: Nils Larsch
2002-10-29The recent CHANGES note between 0.9.6g and 0.9.6h needs copying into theGeoff Thorpe
other branches.
2002-10-28clean up new code for NIST primesBodo Möller
create new lock CRYPTO_LOCK_BN to avoid race condition
2002-10-28fast reduction for NIST curvesBodo Möller
Submitted by: Nils Larsch
2002-10-12Clarify where the engines are by default.Richard Levitte
2002-10-11Step 14 of move of engines: Final step, document the change.Richard Levitte
2002-10-11synchronize with 0.9.7-stable version of this fileBodo Möller
2002-10-11Move the shared library construction stuff to Makefile.shared, aRichard Levitte
helper makefile that generalises our way of building shared libraries and is designed to take care of almost anything (I hope).
2002-10-10RFC 2712 redefines the codes for use of Kerberos 5 in SSL/TLS.Richard Levitte
PR: 189
2002-10-04Add version info to Win32 DLLs.Dr. Stephen Henson
We might want to edit the strings a bit... Maybe add to 0.9.7 too?
2002-10-03Various enhancements to PKCS#12 code, newDr. Stephen Henson
medium level API, improved PKCS12_create and additional functionality in pkcs12 utility.
2002-10-03Preliminary streaming ASN1 encode support.Dr. Stephen Henson
2002-09-26fix more race conditionsBodo Möller
Submitted by: "Patrick McCormick" <patrick@tellme.com> PR: 262
2002-09-25really fix race conditionsBodo Möller
Submitted by: "Patrick McCormick" <patrick@tellme.com> PR: 262 PR: 291
2002-09-23really fix race conditionBodo Möller
PR: 262
2002-09-19there is no minimum length for session IDsBodo Möller
PR: 274
2002-09-19fix race conditionBodo Möller
PR: 262
2002-09-10Let 'openssl req' fail if an argument to '-newkey' is notBodo Möller
recognized instead of using RSA as a default.
2002-09-02-nameopt fix has been moved to 0.9.7Bodo Möller
2002-09-02mention EC_get_builtin_curves()Bodo Möller
2002-08-22Make -nameopt work in req and add support for -reqoptDr. Stephen Henson
2002-08-16Reorder cleanup sequence in SSL_CTX_free() to leave ex_data for remove_cb().Lutz Jänicke
Submitted by: Reviewed by: PR: 212
2002-08-16Fix block_size field for CFB and OFB modes: it should be 1.Dr. Stephen Henson
2002-08-15Simplify handling of named curves: get rid of EC_GROUP_new_by_name(),Bodo Möller
EC_GROUP_new_by_nid() should be enough. This avoids a lot of redundancy. Submitted by: Nils Larsch
2002-08-14move a TODO from CHANGES to STATUSBodo Möller
2002-08-14add 'TODO' itemsBodo Möller
2002-08-14Fix typo in OBJ_txt2obj which incorrectly passed the contentDr. Stephen Henson
length, instead of the encoding length to d2i_ASN1_OBJECT. This wasn't visible before becuse ASN1_get_object() used to read past the length of the supplied buffer.
2002-08-12add 0.9.6g informationBodo Möller
2002-08-09ECC ciphersuite supportBodo Möller
Submitted by: Douglas Stebila <douglas.stebila@sun.com> (Authors: Vipul Gupta and Sumit Gupta, Sun Microsystems Laboratories)
2002-08-09Add ECDH support.Bodo Möller
Additional changes: - use EC_GROUP_get_degree() in apps/req.c - add ECDSA and ECDH to apps/speed.c - adds support for EC curves over binary fields to ECDSA - new function EC_KEY_up_ref() in crypto/ec/ec_key.c - reorganize crypto/ecdsa/ecdsatest.c - add engine support for ECDH - fix a few bugs in ECDSA engine support Submitted by: Douglas Stebila <douglas.stebila@sun.com>
2002-08-080.9.6f is releasedRichard Levitte
2002-08-02Fix the ASN1 sanity check: correct header lengthDr. Stephen Henson
calculation and check overflow against LONG_MAX.
2002-08-02disable Sun divison algorithm by defaultBodo Möller
2002-08-02Let BN_rand_range() abort with an error after 100 iterationsBodo Möller
without success.
2002-08-02Change BN_mod_sqrt() so that it verifies that the input value isBodo Möller
really the square of the return value.
2002-08-02Rename implementations of method functions so that they matchBodo Möller
the new method names where _GF... suffixes have been removed. Revert changes to ..._{get/set}_Jprojective_coordinates_...: The current implementation for ECC over binary fields does not use projective coordinates, and if it did, it would not use Jacobian projective coordinates; so it's OK to use the ..._GFp prefix for all this. Add author attributions to some files so that it doesn't look as if Sun wrote all of this :-)
2002-08-02typosBodo Möller
2002-08-02add support for elliptic curves over binary fieldsBodo Möller
Submitted by: Duglas Stebila <douglas.stebila@sun.com>, Sheueling Chang <sheueling.chang@sun.com> (CHANGES entries by Bodo Moeller)
2002-08-02Binary field arithmetic contributed by Sun Microsystems.Bodo Möller
The 'OPENSSL_NO_SUN_DIV' default is still subject to change, so I didn't bother to finish the CHANGES entry yet. Submitted by: Douglas Stebila <douglas.stebila@sun.com>, Sheueling Chang <sheueling.chang@sun.com> (CHANGES entry by Bodo Moeller)
2002-08-02Add more WAP/WTLS elliptic curve OIDs.Bodo Möller
Submitted by: Douglas Stebila <douglas.stebila@sun.com>
2002-08-02get rid of OpenSSLDieBodo Möller
2002-07-30OpenSSL Security Advisory [30 July 2002]Lutz Jänicke
Changes marked "(CHATS)" were sponsored by the Defense Advanced Research Projects Agency (DARPA) and Air Force Research Laboratory, Air Force Materiel Command, USAF, under agreement number F30602-01-2-0537.
2002-07-23Document the recent DJGPP-related changesRichard Levitte
2002-07-22add an explanation and fix a typoBodo Möller
2002-07-19New cipher selection options COMPLEMENTOFALL and COMPLEMENTOFDEFAULT.Lutz Jänicke
Submitted by: Reviewed by: PR: 127
2002-07-16For those wanting to build for several platforms with the same sourceRichard Levitte
directory, making a separate directory tree with lots of symbolic links seems to be the solution. Unfortunately, Configure doesn't take appropriate steps to support this solution (as in removing a file that's going to be rewritten). This change corrects that situation. Now I just have to find all other places where there's lack of support for this.
2002-07-14Replace 'ecdsaparam' commandline utility by 'ecparam'Bodo Möller
(the same keys can be used for ECC schemes other than ECDSA) and add some new options. Similarly, use string "EC PARAMETERS" instead of "ECDSA PARAMETERS" in 'PEM' format. Fix ec_asn1.c (take into account the desired conversion form). 'make update'. Submitted by: Nils Larsch
2002-07-10Ciphers with NULL encryption were not properly handled because they wereLutz Jänicke
not covered by the strength bit mask. Submitted by: Reviewed by: PR: 130