Mark J. Cox [Tue, 31 May 2005 21:42:48 +0000 (21:42 +0000)]
Add the vulnerabilities database to the site; but don't link it in
yet until it's working totally. To change or add a vulnerability you
exit vulnerabilities.xml then run an xslt processor on that file with
the vulnerabilities.xsl stylesheet and out will pop vulnerabilities.wml
that the website knows how to process. For now we make the user who
commits the change do this, and also commit in the wml file. We could
probably do this at make time with some perl, but the openssl site
doesn't have all the dependancies needed for XML::XSLT yet.
Although a lot of this information is in our changes file and in news
items on the site there isn't a single place where you can get a
complete overview of the vulnerabilities. A CSO I was speaking too
this month was suprised by how few issues there had been and thought
there were many more serious issues that had affected OpenSSL, this
page is, unsuprisingly, similar to the Apache httpd vulnerabilities pages
and is based on raw data I've been collecting on vulnerabilities for
Red Hat.
Richard Levitte [Mon, 30 May 2005 23:34:35 +0000 (23:34 +0000)]
Create the announcement for beta 3.
Richard Levitte [Mon, 30 May 2005 23:30:09 +0000 (23:30 +0000)]
Add the newsflash about beta3
Ralf S. Engelschall [Fri, 27 May 2005 19:39:22 +0000 (19:39 +0000)]
test commit after project environment migration
Ralf S. Engelschall [Fri, 27 May 2005 19:27:39 +0000 (19:27 +0000)]
adjust for latest world order
Richard Levitte [Tue, 24 May 2005 04:19:55 +0000 (04:19 +0000)]
The announcement for beta2
Richard Levitte [Tue, 24 May 2005 04:18:58 +0000 (04:18 +0000)]
News: beta2 released
Richard Levitte [Tue, 24 May 2005 03:56:41 +0000 (03:56 +0000)]
Slight adjustment to fit my personal schedule.
Richard Levitte [Thu, 19 May 2005 23:35:23 +0000 (23:35 +0000)]
Wrong year *blush*
Richard Levitte [Thu, 19 May 2005 20:08:20 +0000 (20:08 +0000)]
Add beta announcement text for 0.9.8-beta1.
Richard Levitte [Thu, 19 May 2005 19:55:42 +0000 (19:55 +0000)]
Add newflash about 0.9.8-beta1.
Richard Levitte [Wed, 18 May 2005 04:19:35 +0000 (04:19 +0000)]
I slipped. That means the schedule has been changed, again.
Richard Levitte [Sun, 8 May 2005 18:55:42 +0000 (18:55 +0000)]
We need to push it yet another week. I hope this will be the last
time we have to push...
Richard Levitte [Thu, 5 May 2005 06:30:22 +0000 (06:30 +0000)]
Change to my current PGP id.
Richard Levitte [Mon, 2 May 2005 04:31:52 +0000 (04:31 +0000)]
Move the release plan by one week. Reasons:
- pqueue needs some kind of rework, as BN_[U]LLONG isn't supported
everywhere.
- some things from 0.9.7 still need to be ported.
- Nils Larsch has a few changes that need to go into bn_nist.c.
Richard Levitte [Mon, 11 Apr 2005 15:46:18 +0000 (15:46 +0000)]
Announce on the web.
Richard Levitte [Sat, 9 Apr 2005 07:40:07 +0000 (07:40 +0000)]
The DFN-PCA URL changed.
Richard Levitte [Wed, 6 Apr 2005 09:57:41 +0000 (09:57 +0000)]
A showstopper showed up, and someone SCREAMED stop. So I'm moving the
release of 0.9.7g to next monday.
Richard Levitte [Sat, 2 Apr 2005 08:52:29 +0000 (08:52 +0000)]
Add tentative dates for release of 0.9.7g and for the upcoming beta
period and release of 0.9.8.
Richard Levitte [Thu, 31 Mar 2005 12:07:55 +0000 (12:07 +0000)]
Add a section for miscellaneous documents.
Richard Levitte [Thu, 31 Mar 2005 11:33:47 +0000 (11:33 +0000)]
If we ignore the distribution files, we need to ignore the signature
and checksum files as well.
Nils Larsch [Sat, 26 Mar 2005 11:03:54 +0000 (11:03 +0000)]
update ;-)
Dr. Stephen Henson [Tue, 22 Mar 2005 20:01:46 +0000 (20:01 +0000)]
Set latest version.
Dr. Stephen Henson [Tue, 22 Mar 2005 19:33:27 +0000 (19:33 +0000)]
Update website
Bodo Möller [Thu, 27 Jan 2005 22:26:06 +0000 (22:26 +0000)]
another location change
Richard Levitte [Sun, 16 Jan 2005 17:10:43 +0000 (17:10 +0000)]
Add Secure Endpoints.
Mark J. Cox [Wed, 15 Dec 2004 12:53:42 +0000 (12:53 +0000)]
Received a report of a XSS issue with this script; rather than bothering
to encode the output as a quick fix just don't echo back user input
Bodo Möller [Fri, 10 Dec 2004 17:05:56 +0000 (17:05 +0000)]
TLS v1 link (to consensus.com) was broken.
Point to IETF TLS Working Group page instead.
Mark J. Cox [Tue, 30 Nov 2004 14:26:23 +0000 (14:26 +0000)]
Quick bodge to get the spacing not running together
Mark J. Cox [Tue, 30 Nov 2004 14:21:44 +0000 (14:21 +0000)]
Fix formatting
Mark J. Cox [Tue, 30 Nov 2004 14:19:37 +0000 (14:19 +0000)]
Add key id's and links to one key server. I've only included the keys
that have so far been used to sign OpenSSL distributions
Dr. Stephen Henson [Fri, 26 Nov 2004 00:55:51 +0000 (00:55 +0000)]
Fix website to use section overrides.
Dr. Stephen Henson [Thu, 25 Nov 2004 23:01:06 +0000 (23:01 +0000)]
Update make-docs-makefile.pl to recognize section override.
Dr. Stephen Henson [Wed, 24 Nov 2004 22:07:52 +0000 (22:07 +0000)]
Hopefully fix snb in docs.
Dr. Stephen Henson [Sun, 14 Nov 2004 00:03:56 +0000 (00:03 +0000)]
Include trailing / in URL.
Dr. Stephen Henson [Sat, 13 Nov 2004 14:21:08 +0000 (14:21 +0000)]
PR: 958
Update info.
Bodo Möller [Fri, 29 Oct 2004 07:38:56 +0000 (07:38 +0000)]
location change
Dr. Stephen Henson [Mon, 25 Oct 2004 15:47:45 +0000 (15:47 +0000)]
Correct announce.wml
Mark J. Cox [Mon, 25 Oct 2004 14:06:12 +0000 (14:06 +0000)]
Remove old security link
Dr. Stephen Henson [Mon, 25 Oct 2004 12:02:06 +0000 (12:02 +0000)]
Update web sources.
Ralf S. Engelschall [Mon, 18 Oct 2004 17:16:39 +0000 (17:16 +0000)]
remember hOpenSSL
Geoff Thorpe [Thu, 5 Aug 2004 01:53:48 +0000 (01:53 +0000)]
Make a link for the PadLock backport to 0.9.7.
Richard Levitte [Mon, 28 Jun 2004 11:42:29 +0000 (11:42 +0000)]
Replace Netware patch for OpenSSL 0.9.6j with one for OpenSSL 0.9.6m.
PR: 902
Richard Levitte [Mon, 28 Jun 2004 11:39:39 +0000 (11:39 +0000)]
Add NetWare patches for OpenSSL 0.9.7d.
PR: 781
Geoff Thorpe [Wed, 31 Mar 2004 06:25:58 +0000 (06:25 +0000)]
L'immigration est finalement terminée, tabarn...
Content, tu dis? Mets-en!
Mark J. Cox [Wed, 17 Mar 2004 15:12:22 +0000 (15:12 +0000)]
Doh
Mark J. Cox [Wed, 17 Mar 2004 12:21:42 +0000 (12:21 +0000)]
Fix curren versions
Mark J. Cox [Wed, 17 Mar 2004 12:20:14 +0000 (12:20 +0000)]
Fill in final checksums
Mark J. Cox [Wed, 17 Mar 2004 12:17:45 +0000 (12:17 +0000)]
Add security advisory
Dr. Stephen Henson [Tue, 2 Mar 2004 14:00:46 +0000 (14:00 +0000)]
Shouldn't need this any more.
Dr. Stephen Henson [Sat, 21 Feb 2004 23:47:05 +0000 (23:47 +0000)]
New mirror site.
Richard Levitte [Mon, 2 Feb 2004 21:52:06 +0000 (21:52 +0000)]
Allow rfilelist to show MD5 and PGP signature links when the
corresponding file is available. Make sure to give an argument to
rfilelist that does NOT include those files.
Richard Levitte [Sun, 18 Jan 2004 11:51:27 +0000 (11:51 +0000)]
Thomas has simplified the name for his OpenSSL binary dist.
Bodo Möller [Fri, 12 Dec 2003 06:57:19 +0000 (06:57 +0000)]
update location
Mark J. Cox [Tue, 4 Nov 2003 12:00:06 +0000 (12:00 +0000)]
Add security advisory and newsflash
Dr. Stephen Henson [Wed, 1 Oct 2003 17:11:20 +0000 (17:11 +0000)]
Who he?
Mark J. Cox [Wed, 1 Oct 2003 14:04:44 +0000 (14:04 +0000)]
Fix pointer to current and next releases
Mark J. Cox [Wed, 1 Oct 2003 14:04:19 +0000 (14:04 +0000)]
Add a copy of the LICENSE to the web site and link into front page;
we get at least one query a week asking for this.
Dr. Stephen Henson [Tue, 30 Sep 2003 14:07:54 +0000 (14:07 +0000)]
Update announce.wml
Dr. Stephen Henson [Tue, 30 Sep 2003 13:25:57 +0000 (13:25 +0000)]
Security advisories and release info.
Richard Levitte [Mon, 11 Aug 2003 06:27:01 +0000 (06:27 +0000)]
pyCA has changed official URL (although the old one redirected properly).
Another Python CA, ELyCA, added.
Richard Levitte [Mon, 4 Aug 2003 09:58:09 +0000 (09:58 +0000)]
Add a linke to a Delphi import unit.
Richard Levitte [Mon, 14 Jul 2003 09:21:38 +0000 (09:21 +0000)]
Set up correct dependency on make-docs-makefile.template.
Richard Levitte [Mon, 14 Jul 2003 09:16:37 +0000 (09:16 +0000)]
Remove crap filters.
Richard Levitte [Thu, 19 Jun 2003 17:56:49 +0000 (17:56 +0000)]
Add a contributed patch to bring CRL numbers into 0.9.7b.
Richard Levitte [Thu, 12 Jun 2003 01:25:16 +0000 (01:25 +0000)]
Add the Bull PKCS#11 engine patch to the contribution area.
Lutz Jänicke [Fri, 30 May 2003 14:47:22 +0000 (14:47 +0000)]
Add another Certificate How-To.
PR: #616
Submitted by: Franck Martin <Franck@sopac.org>
Lutz Jänicke [Fri, 30 May 2003 14:38:00 +0000 (14:38 +0000)]
Add another new mirror site.
PR: #615
Submitted by: Stephan Jau <stephan.jau@apandrews.com>
Richard Levitte [Fri, 23 May 2003 09:07:01 +0000 (09:07 +0000)]
Allow the use of brackets (they are normally interpretted by wml).
Dr. Stephen Henson [Tue, 20 May 2003 16:27:28 +0000 (16:27 +0000)]
Delete old NetWare patch and replace by the right one this time :-)
Contributed by "Verdon Walker" <VWalker@novell.com>
Dr. Stephen Henson [Mon, 19 May 2003 16:00:51 +0000 (16:00 +0000)]
Delete old NetWare patch and replace by new one.
Contributed by "Verdon Walker" <VWalker@novell.com>
Richard Levitte [Wed, 30 Apr 2003 10:46:56 +0000 (10:46 +0000)]
Force the rebuild of mirror.html as well.
Richard Levitte [Wed, 30 Apr 2003 10:44:51 +0000 (10:44 +0000)]
New mirrors added
Richard Levitte [Thu, 10 Apr 2003 21:17:29 +0000 (21:17 +0000)]
New announcement and status as of the new releases.
Ralf S. Engelschall [Wed, 26 Mar 2003 18:26:09 +0000 (18:26 +0000)]
try to fix Majordomo web interface
Bodo Möller [Wed, 19 Mar 2003 19:27:50 +0000 (19:27 +0000)]
security advisory on Klima-Pokorny-Rosa attack
Ralf S. Engelschall [Tue, 18 Mar 2003 10:02:25 +0000 (10:02 +0000)]
link advisory into website
Ralf S. Engelschall [Tue, 18 Mar 2003 10:00:08 +0000 (10:00 +0000)]
Hmmm... why was this still not added to this place? How should vendors reference the advisory? Through mailing list archive? So, finally add Bens text to this place where the other security advisories already stay
Dr. Stephen Henson [Thu, 13 Mar 2003 14:14:37 +0000 (14:14 +0000)]
Omit openssl-macros.wml
Dr. Stephen Henson [Wed, 12 Mar 2003 18:44:46 +0000 (18:44 +0000)]
Rename openssl.wml to openssl-macros.wml to avoid conflict
with openssl.wml in apps docs.
Ulf Möller [Sat, 22 Feb 2003 12:07:54 +0000 (12:07 +0000)]
remove obsolete email address
Bodo Möller [Thu, 20 Feb 2003 17:11:33 +0000 (17:11 +0000)]
add link to LASEC memo
Ralf S. Engelschall [Wed, 19 Feb 2003 18:49:12 +0000 (18:49 +0000)]
resurrect www.openssl.org/news/news.html URL
Ralf S. Engelschall [Wed, 19 Feb 2003 18:48:17 +0000 (18:48 +0000)]
resurrect www.openssl.org//news/changelog.html URL
Ralf S. Engelschall [Wed, 19 Feb 2003 18:43:42 +0000 (18:43 +0000)]
resurrect old /source/exp/CHANGES URL referenced at many places
Ralf S. Engelschall [Wed, 19 Feb 2003 15:31:06 +0000 (15:31 +0000)]
fix typo --rse
Richard Levitte [Wed, 19 Feb 2003 14:28:18 +0000 (14:28 +0000)]
Add link to security advisory.
Richard Levitte [Wed, 19 Feb 2003 13:50:48 +0000 (13:50 +0000)]
Oops, no touchy .htaccess...
Richard Levitte [Wed, 19 Feb 2003 13:36:43 +0000 (13:36 +0000)]
Announce the release of 0.9.7a and 0.9.6i.
Richard Levitte [Thu, 30 Jan 2003 01:06:08 +0000 (01:06 +0000)]
Force rebuilt of the HOWTO index.
Lutz Jänicke [Mon, 6 Jan 2003 17:09:41 +0000 (17:09 +0000)]
New entry for commercial support by "Linux4Biz".
Richard Levitte [Tue, 31 Dec 2002 00:34:30 +0000 (00:34 +0000)]
Missed one 0.9.6h in my replacement operation...
Richard Levitte [Tue, 31 Dec 2002 00:28:55 +0000 (00:28 +0000)]
Update the info for release of OpenSSL 0.9.7
Richard Levitte [Mon, 23 Dec 2002 11:48:04 +0000 (11:48 +0000)]
Netware patch for OpenSSL 0.9.6h.
PR: 415
Ralf S. Engelschall [Mon, 23 Dec 2002 11:12:20 +0000 (11:12 +0000)]
give proper credit to ISG.EE ETHZ and C&W DE
Richard Levitte [Tue, 17 Dec 2002 14:51:01 +0000 (14:51 +0000)]
Set a date range for the realease of 0.9.7.
Richard Levitte [Tue, 17 Dec 2002 14:49:20 +0000 (14:49 +0000)]
Set a newsflash for Beta 7.
Richard Levitte [Thu, 12 Dec 2002 22:49:51 +0000 (22:49 +0000)]
We're postponing beta 6 until Tuesday 17th, because there are some
important patches that haven't been verified or committed yet.
Ralf S. Engelschall [Tue, 10 Dec 2002 21:16:32 +0000 (21:16 +0000)]
switch from WML 1.x to WML 2.x syntax and from ETHZ to C&W
Ralf S. Engelschall [Tue, 10 Dec 2002 21:15:39 +0000 (21:15 +0000)]
adjust to new environment