[openssl.git] / ChangeLog.0_9_7-stable_not-in-head

This file, together with ChangeLog.0_9_7-stable_not-in-head_FIPS,
provides a collection of those CVS change log entries for the
0.9.7 branch (OpenSSL_0_9_7-stable) that do not appear similarly in
0.9.8-dev (CVS head).
    
ChangeLog.0_9_7-stable_not-in-head_FIPS  -  "FIPS" related changes
ChangeLog.0_9_7-stable_not-in-head       -  everything else

Some obvious false positives have been eliminated: e.g., we do not
care about a simple "make update"; and we don't care about changes
identified to the 0.9.7 branch that were explicitly identified as
backports from head.
    
Eliminating all other entries (and finally this file and its
compantion), either as false positives or as things that should go
into 0.9.8, remains to be done.  Any additional changes to 0.9.7 that
are not immediately put into 0.9.8, but belong there as well, should
be added to the end of this file.


2002-02-14 03:43  levitte

        Changed:
                crypto/des/str2key.c (1.12.2.1), "Exp", lines: +12 -0

        Because making the key strong by xoring the last byte with 0xF0
        generates different keys than previous versions of OpenSSL and
        libdes, let's make Assar's change experimental for now.

2002-02-14 14:42  levitte

        Changed:
                crypto/err/err.c (1.51.2.1), "Exp", lines: +1 -1

        For some reason, getting the topmost error was done the same way as
        getting the bottommost one.  I hope I understood correctly how this
        should be done.  It seems to work when running evp_test in an
        environment where it can't find openssl.cnf.

2002-02-14 14:51  levitte

        Changed:
                crypto/des/read2pwd.c (1.6.2.1), "Exp", lines: +1 -0

        Make sure memset() is defined by including string.h Notified by
        Oscar Jacobsson <oscar@jacobsson.org>

2002-02-14 17:23  levitte

        Changed:
                crypto/ui/ui_openssl.c (1.11.2.1), "Exp", lines: +7 -1
                crypto/rsa/rsa.h (1.36.2.1), "Exp", lines: +6 -6
                crypto/rand/rand_egd.c (1.16.2.1), "Exp", lines: +5 -1
                crypto/des/read_pwd.c (1.26.2.1), "Exp", lines: +7 -1
                crypto/bio/bss_log.c (1.30.2.1), "Exp", lines: +1 -1
                crypto/bio/bss_bio.c (1.31.2.1), "Exp", lines: +5 -0
                crypto/tmdiff.c (1.9.2.1), "Exp", lines: +17 -2
                apps/speed.c (1.83.2.1), "Exp", lines: +20 -4
                apps/ca.c (1.102.2.1), "Exp", lines: +1 -1
                apps/s_time.c (1.23.2.1), "Exp", lines: +20 -2
                Configure (1.314.2.3), "Exp", lines: +3 -0
                e_os.h (1.56.2.1), "Exp", lines: +9 -1

        Add the configuration target VxWorks.

2002-02-14 19:46  steve

        Changed:
                crypto/engine/hw_sureware.c (1.2.2.1), "Exp", lines: +8 -4

        Fix warnings:

                #if out some unused function.

                "index" is a global function on some platforms.

2002-02-14 19:52  steve

        Changed:
                crypto/tmdiff.c (1.9.2.2), "Exp", lines: +1 -0

        typo (?)

2002-02-15 00:38  steve

        Changed:
                CHANGES (1.977.2.2), "Exp", lines: +5 -0
                crypto/conf/conf.h (1.30.2.1), "Exp", lines: +2 -1
                crypto/conf/conf_mall.c (1.6.2.1), "Exp", lines: +6 -7
                crypto/conf/conf_mod.c (1.8.2.1), "Exp", lines: +8 -0

        Add argument to OPENSSL_config() and add flag to tolerate missing
        config file.

2002-02-15 01:12  steve

        Changed:
                NEWS (1.39.2.1), "Exp", lines: +5 -1

        Update NEWS

2002-02-15 01:33  steve

        Changed:
                crypto/asn1/asn1.h (1.103.2.1), "Exp", lines: +3 -0
                crypto/asn1/asn1_err.c (1.42.2.1), "Exp", lines: +3 -0
                crypto/asn1/asn_moid.c (1.2.2.1), "Exp", lines: +21 -10
                crypto/conf/conf_mod.c (1.8.2.2), "Exp", lines: +2 -6

        Don't call finish function if it isn't set.

                Fix OID module.

2002-02-15 01:58  steve

        Changed:
                crypto/x509/x509_vfy.c (1.56.2.1), "Exp", lines: +23 -13

        Allow a NULL store parameter to X509_STORE_CTX_init().

2002-02-15 02:01  steve

        Changed:
                crypto/evp/evp_enc.c (1.28.2.1), "Exp", lines: +2 -1

        Only initialize cipher ctx if cipher is not NULL.

2002-02-15 03:43  steve

        Changed:
                crypto/conf/conf_mod.c (1.8.2.3), "Exp", lines: +1 -1

        Add flag to disable config module DSO loading.

2002-02-20 00:24  steve

        Changed:
                CHANGES (1.977.2.3), "Exp", lines: +4 -0
                apps/apps.c (1.49.2.1), "Exp", lines: +20 -0
                crypto/conf/conf_mall.c (1.6.2.3), "Exp", lines: +2 -14
                crypto/conf/conf_mod.c (1.8.2.4), "Exp", lines: +15 -1

        Use default openssl.cnf if config filename set to NULL and
        openssl_conf if appname NULL.

2002-02-23 14:43  steve

        Changed:
                crypto/asn1/asn_moid.c (1.2.2.2), "Exp", lines: +0 -1

        Remove old comment

2002-03-01 16:39  ben

        Changed:
                Configure (1.314.2.6), "Exp", lines: +1 -0

        OpenBSD variant.

2002-03-08 20:12  steve

        Changed:
                apps/apps.c (1.49.2.4), "Exp", lines: +1 -1

        typo

2002-03-22 03:36  levitte

        Changed:
                apps/version.c (1.13.2.1), "Exp", lines: +2 -2
                apps/speed.c (1.83.2.6), "Exp", lines: +6 -6
                apps/passwd.c (1.24.2.2), "Exp", lines: +2 -2

        Use the more modern DES API in the openssl subcommands.

2002-03-22 11:29  levitte

        Changed:
                crypto/des/des_old.h (1.9.2.4), "Exp", lines: +35 -23

        Key schedules are given as arguments a bit differently in 0.9.6 and
        earlier.  Also, a few 0.9.6 functions were missing their mappings.

2002-03-22 11:46  levitte

        Changed:
                crypto/des/destest.c (1.30.2.2), "Exp", lines: +37 -35

        Key schedules are given as arguments a bit differently in 0.9.6 and
        earlier.  Also, it was an error to define crypt() at all times.

2002-03-26 15:25  levitte

        Changed:
                CHANGES (1.977.2.15), "Exp", lines: +19 -8
                crypto/des/des.h (1.40.2.2), "Exp", lines: +6 -0

        Add the possibility to enable olde des support, not just disable
        it, for future support.  Redocument

2002-04-20 12:25  levitte

        Changed:
                util/mk1mf.pl (1.41.2.1), "Exp", lines: +4 -1

        Make sure ec is properly handled in Windows.

2002-05-08 17:13  ben

        Changed:
                crypto/conf/conf_mod.c (1.8.2.6), "Exp", lines: +1 -1

        Fix warning.

2002-05-11 14:42  steve

        Changed:
                ssl/ssl_cert.c (1.48.2.3), "Exp", lines: +0 -1


                closedir is not used on Win32.

2002-05-22 09:53  levitte

        Changed:
                apps/speed.c (1.83.2.7), "Exp", lines: +4 -1

        Remove warnings about unused symbols when configured with no-rsa.

2002-05-22 09:55  levitte

        Changed:
                crypto/asn1/x_pubkey.c (1.21.2.1), "Exp", lines: +1 -1

        Remove warnings about uninitialised variables.  This has already
        been applied in the main branch.

2002-05-22 09:56  levitte

        Changed:
                crypto/engine/hw_4758_cca.c (1.1.2.4), "Exp", lines: +14 -14

        Use 0 instead of NULL when casting to function pointers, to avoid
        warnings from compilers when NULL is defined as '((void *)0)'.
        This has already been applied in the main branch.

2002-05-22 09:58  levitte

        Changed:
                util/mkerr.pl (1.18.2.1), "Exp", lines: +2 -2

        Update copyright years.  This has already been applied in the main
        branch.

2002-05-23 17:25  levitte

        Changed:
                VMS/tcpip_shr_decc.opt (1.1.4.1), "Exp", lines: +1 -0

        Forgot this file.

2002-05-31 16:34  ben

        Changed:
                crypto/evp/evp_test.c (1.14.2.5), "Exp", lines: +1 -1

        Fix a warning.

2002-06-05 08:45  levitte

        Changed:
                ssl/ssl-lib.com (1.11.2.3), "Exp", lines: +1 -1
                test/maketests.com (1.13.2.2), "Exp", lines: +29 -1

        Correct syntax in ssl-lib.com maketests.com was missing the TCP/IP
        options TCPIP and NONE

2002-08-13 14:19  levitte

        Changed:
                demos/engines/rsaref/Makefile (1.3.2.1), "Exp", lines: +1 -1

        Export text symbols as well (AIX experts might need to correct me
        here).

2002-08-13 14:26  levitte

        Changed:
                demos/engines/cluster_labs/Makefile (1.1.2.1), "Exp", lines: +114 -0
                demos/engines/cluster_labs/cluster_labs.h (1.1.2.1), "Exp", lines: +35 -0
                demos/engines/cluster_labs/hw_cluster_labs.c (1.1.2.1), "Exp", lines: +718 -0
                demos/engines/cluster_labs/hw_cluster_labs.ec (1.1.2.1), "Exp", lines: +8 -0
                demos/engines/cluster_labs/hw_cluster_labs_err.c (1.1.2.1), "Exp", lines: +151 -0
                demos/engines/cluster_labs/hw_cluster_labs_err.h (1.1.2.1), "Exp", lines: +95 -0
                demos/engines/ibmca/Makefile (1.1.2.1), "Exp", lines: +114 -0
                demos/engines/ibmca/hw_ibmca.c (1.1.2.1), "Exp", lines: +917 -0
                demos/engines/ibmca/hw_ibmca.ec (1.1.2.1), "Exp", lines: +8 -0
                demos/engines/ibmca/hw_ibmca_err.c (1.1.2.1), "Exp", lines: +154 -0
                demos/engines/ibmca/hw_ibmca_err.h (1.1.2.1), "Exp", lines: +98 -0
                demos/engines/ibmca/ica_openssl_api.h (1.1.2.1), "Exp", lines: +189 -0
                demos/engines/zencod/Makefile (1.1.2.1), "Exp", lines: +114 -0
                demos/engines/zencod/hw_zencod.c (1.1.2.1), "Exp", lines: +1736 -0
                demos/engines/zencod/hw_zencod.ec (1.1.2.1), "Exp", lines: +8 -0
                demos/engines/zencod/hw_zencod.h (1.1.2.1), "Exp", lines: +160 -0
                demos/engines/zencod/hw_zencod_err.c (1.1.2.1), "Exp", lines: +151 -0
                demos/engines/zencod/hw_zencod_err.h (1.1.2.1), "Exp", lines: +95 -0

        OK, I've amused myself with making sure the engines that have been
        contributed TO WORK WITH 0.9.7 can be built as dynamically loadable
        libraries.

                For now, they're not included in crypto/engine/ since 0.9.7
        is in feature freeze.  Further discussion might change that, but
        don't hold your breath.

2002-08-15 13:48  levitte

        Changed:
                crypto/crypto-lib.com (1.53.2.8), "Exp", lines: +1 -1

        I think that's the last forgotten compilation module.

2002-10-05 13:59  steve

        Changed:
                crypto/engine/hw_cswift.c (1.17.2.4), "Exp", lines: +1 -1

        Win32 fix (signed/unsigned compare error).

2002-10-09 14:19  levitte

        Changed:
                crypto/engine/hw_cswift.c (1.17.2.5), "Exp", lines: +1 -0

        The dissapearing destroy callback reappears

2002-10-24 00:09  levitte

        Changed:
                crypto/crypto-lib.com (1.53.2.9), "Exp", lines: +1 -1

        An engine changed name.

2002-10-29 18:46  geoff

        Changed:
                doc/ssl/SSL_CTX_set_session_cache_mode.pod (1.5.2.2), "Exp", lines: +1 -0

        Correct another inconsistency in my recent commits.

2002-11-04 17:33  levitte

        Changed:
                Configure (1.314.2.38), "Exp", lines: +4 -2

        Return my normal debug targets to something not so extreme, and
        make the extreme ones special (or 'extreme', if you will :-)).

2002-11-13 12:35  levitte

        Changed:
                crypto/cryptlib.h (1.10.2.4), "Exp", lines: +0 -4
                crypto/crypto.h (1.62.2.3), "Exp", lines: +4 -0

        Make OpenSSLdie() visible (it's a must to get a proper reference in
        libeay.num).

2002-11-13 14:36  levitte

        Changed:
                crypto/pem/pem_lib.c (1.36.2.5), "Exp", lines: +1 -1

        C++ comments in C code, 'nuff said...

2002-11-13 15:30  levitte

        Changed:
                demos/engines/ibmca/hw_ibmca.c (1.1.2.2), "Exp", lines: +3 -0
                demos/engines/zencod/hw_zencod.c (1.1.2.2), "Exp", lines: +4 -1
                demos/engines/cluster_labs/hw_cluster_labs.c (1.1.2.2), "Exp", lines: +5 -2

        The loading functions should be static if we build a dynamic
        engine.

2002-12-12 18:41  levitte

        Changed:
                crypto/engine/hw_ncipher.c (1.26.2.7), "Exp", lines: +38 -2
                crypto/engine/hw_ncipher_err.c (1.1.2.2), "Exp", lines: +1 -1
                crypto/engine/hw_ncipher_err.h (1.1.2.2), "Exp", lines: +1 -1
                crypto/cryptlib.c (1.32.2.8), "Exp", lines: +2 -1
                crypto/crypto.h (1.62.2.7), "Exp", lines: +2 -1
                CHANGES (1.977.2.78), "Exp", lines: +14 -0

        Add a static lock called HWCRHK, for the case of having an
        application that wants to use the hw_ncipher engine without having
        given any callbacks for the dynamic type of locks.

2002-12-15 16:27  appro

        Changed:
                Makefile.org (1.154.2.41), "Exp", lines: +2 -1

        Another Solaris shared build clean-up. This is not actually needed
        if one uses WorkShop C. It's gcc driver that brings copy of
        libgcc.a into .so otherwise. In case you wonder what it's -Wl,-z...
        and not just -z. Problem is that gcc driver apparently omits all -z
        options but -z text. Don't ask me why. I'm not committing
        corresponding workaround into the HEAD as Makefile.shared
        reportedly needs even more work...

2002-12-16 19:17  appro

        Changed:
                crypto/bn/bn_lcl.h (1.23.2.3), "Exp", lines: +3 -0
                crypto/bn/bn_mul.c (1.28.2.4), "Exp", lines: +84 -445

        This is rollback to 0.9.6h bn_mul.c to address problem reported in
        RT#272.

2002-12-16 19:59  appro

        Changed:
                Makefile.org (1.154.2.42), "Exp", lines: +3 -1

        Some of Sun compiler drivers (well, one of those I have) collect
        all options specified with -Wl in the beginnig of the ld command
        line which kind of obsoletes the idea as it's -z defaultextract
        that will be closest to lib*.a and not -z allextract:-(

2002-12-17 15:21  levitte

        Changed:
                NEWS (1.39.2.16), "Exp", lines: +4 -1

        A few more NEWS items.

!2002-12-27 17:49  appro
!
!       Changed:
!               Configure (1.314.2.62), "Exp", lines: +1 -1
!
!       According to Tim Rice <tim@multitalents.net> assembler support in
!       SCO5 never worked anyway. Note this is not going to HEAD as we
!       intend to provide an alternative solution as soon as 0.9.7 is out.

2002-12-28 02:35  levitte

        Changed:
                Configure (1.314.2.63), "Exp", lines: +1 -1

        Hmm, the variables $x96_elf_asm and others contain a number of
        colons, so when removing one reference, if should be replaced with
        the appropriate number of colons, or chaos will follow...

        It's rather silly to believe we'd release 0.9.7a in 2002 :-).

2003-01-01 16:48  ben

        Changed:
                crypto/des/des_locl.h (1.19.2.5), "Exp", lines: +1 -1
                crypto/rc5/rc5_locl.h (1.3.2.4), "Exp", lines: +1 -1

        Fix warnings, use correct -Ds.

2003-03-24 17:57  steve

        Changed:
                crypto/x509/x509_vfy.c (1.56.2.5), "Exp", lines: +2 -2
                crypto/x509/x509_vfy.c (1.56.2.6), "Exp", lines: +2 -2

        Get X509_V_FLAG_CRL_CHECK_ALL logic the right way round.  PR:544

? 2003-04-04 16:21  levitte

        Changed:
                util/mkdef.pl (1.67.2.5), "Exp", lines: +10 -5
                util/mkerr.pl (1.18.2.3), "Exp", lines: +6 -6

        Transfer the changes to detect multiline comments and the GCC
        extension __attribute__.

2003-04-08 13:54  levitte

        Changed:
                test/Makefile.ssl (1.84.2.25), "Exp", lines: +29 -1
                apps/Makefile.ssl (1.100.2.22), "Exp", lines: +1 -0
                Makefile.org (1.154.2.61), "Exp", lines: +4 -5

        Set LD_LIBRARY_PATH when linking, since OpenUnix' ld uses it to
        create a library search path.

                Correct typos.

2003-04-09 07:25  levitte

        Changed:
                test/Makefile.ssl (1.84.2.26), "Exp", lines: +1 -1

        Typo

2003-04-09 08:50  levitte

        Changed:
                apps/Makefile.ssl (1.100.2.23), "Exp", lines: +1 -0

        Dont forget req.

2003-04-10 03:13  steve

        Changed:
                crypto/rsa/rsa_sign.c (1.11.2.6), "Exp", lines: +2 -2

        Only call redirected rsa_sign or rsa_verify if the pointer is set.

                This allows, for example, a smart card to redirect rsa_sign
        and keep the default rsa_verify.

2003-07-03 23:43  levitte

        Changed:
                Makefile.org (1.154.2.65), "Exp", lines: +2 -2

        Add a slash so grep doesn't return both ./crypto/bio/bss_mem.o and
        ./crypto/mem.o when we're looking for mem.o.

2003-07-27 15:46  ben

        Changed:
                crypto/aes/aes.h (1.1.2.5), "Exp", lines: +3 -0
                crypto/aes/aes_cfb.c (1.1.2.4), "Exp", lines: +57 -0

        Add untested CFB-r mode. Will be tested soon.

2003-07-28 17:07  ben

        Changed:
                Makefile.org (1.154.2.69), "Exp", lines: +5 -1
                crypto/aes/aes.h (1.1.2.6), "Exp", lines: +3 -0
                crypto/aes/aes_cfb.c (1.1.2.5), "Exp", lines: +19 -0
                crypto/dsa/Makefile.ssl (1.49.2.6), "Exp", lines: +3 -2
                crypto/err/Makefile.ssl (1.48.2.4), "Exp", lines: +17 -16
                crypto/evp/e_aes.c (1.6.2.5), "Exp", lines: +8 -0
                crypto/evp/e_des.c (1.5.2.2), "Exp", lines: +1 -1
                crypto/evp/e_des3.c (1.8.2.3), "Exp", lines: +2 -2
                crypto/evp/evp.h (1.86.2.11), "Exp", lines: +28 -11
                crypto/evp/evp_locl.h (1.7.2.3), "Exp", lines: +2 -2
                crypto/objects/obj_dat.h (1.49.2.13), "Exp", lines: +10 -5
                crypto/objects/obj_mac.h (1.19.2.13), "Exp", lines: +5 -0
                crypto/objects/obj_mac.num (1.15.2.9), "Exp", lines: +1 -0
                crypto/objects/objects.txt (1.20.2.14), "Exp", lines: +4 -0
                fips/Makefile.ssl (1.1.2.3), "Exp", lines: +7 -0
                fips/aes/Makefile.ssl (1.1.2.2), "Exp", lines: +23 -1
                fips/aes/fips_aesavs.c (1.1.2.3), "Exp", lines: +9 -1
                test/Makefile.ssl (1.84.2.30), "Exp", lines: +101 -43

        Add support for partial CFB modes, make tests work, update
        dependencies.

2003-07-29 12:56  ben

        Changed:
                crypto/aes/aes_cfb.c (1.1.2.6), "Exp", lines: +9 -6
                crypto/evp/c_allc.c (1.8.2.3), "Exp", lines: +1 -0
                crypto/evp/evp_test.c (1.14.2.11), "Exp", lines: +17 -8
                crypto/evp/evptests.txt (1.9.2.2), "Exp", lines: +48 -1

        Working CFB1 and test vectors.

2003-07-29 15:24  ben

        Changed:
                crypto/evp/e_aes.c (1.6.2.6), "Exp", lines: +14 -0
                crypto/objects/obj_dat.h (1.49.2.14), "Exp", lines: +15 -5
                crypto/objects/obj_mac.h (1.19.2.14), "Exp", lines: +10 -0
                crypto/objects/obj_mac.num (1.15.2.10), "Exp", lines: +2 -0
                crypto/objects/objects.txt (1.20.2.15), "Exp", lines: +2 -0
                fips/aes/Makefile.ssl (1.1.2.3), "Exp", lines: +1 -1
                fips/aes/fips_aesavs.c (1.1.2.4), "Exp", lines: +34 -19

        The rest of the keysizes for CFB1, working AES AVS test for CFB1.

2003-07-29 19:05  ben

        Changed:
                crypto/aes/aes.h (1.1.2.7), "Exp", lines: +3 -0
                crypto/aes/aes_cfb.c (1.1.2.7), "Exp", lines: +14 -0
                crypto/evp/c_allc.c (1.8.2.4), "Exp", lines: +1 -0
                crypto/evp/e_aes.c (1.6.2.7), "Exp", lines: +4 -9
                crypto/evp/evptests.txt (1.9.2.3), "Exp", lines: +48 -0
                crypto/objects/obj_dat.h (1.49.2.15), "Exp", lines: +20 -5
                crypto/objects/obj_mac.h (1.19.2.15), "Exp", lines: +15 -0
                crypto/objects/obj_mac.num (1.15.2.11), "Exp", lines: +3 -0
                crypto/objects/objects.txt (1.20.2.16), "Exp", lines: +3 -0
                fips/aes/fips_aesavs.c (1.1.2.7), "Exp", lines: +11 -0

        AES CFB8.

2003-07-30 20:30  ben

        Changed:
                Makefile.org (1.154.2.70), "Exp", lines: +16 -5
                crypto/des/cfb_enc.c (1.7.2.1), "Exp", lines: +2 -1
                crypto/des/des_enc.c (1.11.2.2), "Exp", lines: +4 -0
                crypto/evp/e_aes.c (1.6.2.8), "Exp", lines: +7 -14
                crypto/evp/e_des.c (1.5.2.3), "Exp", lines: +37 -1
                crypto/evp/evp.h (1.86.2.12), "Exp", lines: +6 -0
                crypto/evp/evp_locl.h (1.7.2.4), "Exp", lines: +9 -0
                crypto/objects/obj_dat.h (1.49.2.16), "Exp", lines: +48 -23
                crypto/objects/obj_mac.h (1.19.2.16), "Exp", lines: +31 -6
                crypto/objects/obj_mac.num (1.15.2.12), "Exp", lines: +5 -0
                crypto/objects/objects.txt (1.20.2.17), "Exp", lines: +12 -6
                fips/Makefile.ssl (1.1.2.4), "Exp", lines: +8 -1
                fips/fips_make_sha1 (1.1.2.3), "Exp", lines: +3 -0
                fips/aes/Makefile.ssl (1.1.2.4), "Exp", lines: +1 -1
                fips/des/.cvsignore (1.1.2.1), "Exp", lines: +3 -0
                fips/des/Makefile.ssl (1.1.2.1), "Exp", lines: +96 -0
                fips/des/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
                fips/des/fips_des_enc.c (1.1.2.1), "Exp", lines: +288 -0
                fips/des/fips_des_locl.h (1.1.2.1), "Exp", lines: +428 -0
                fips/des/fips_desmovs.c (1.1.2.1), "Exp", lines: +659 -0

        Whoops, forgot FIPS DES, also add EVPs for DES CFB1 and 8.

2003-07-31 23:30  levitte

        Changed:
                Makefile.org (1.154.2.71), "Exp", lines: +2 -0

        If FDIRS is to be treated like SDIRS, let's not forget to
        initialize it in Makefile.org.

2003-08-01 12:25  ben

        Changed:
                crypto/des/cfb_enc.c (1.7.2.2), "Exp", lines: +45 -36
                crypto/evp/c_allc.c (1.8.2.5), "Exp", lines: +2 -0
                crypto/evp/e_des.c (1.5.2.4), "Exp", lines: +8 -3
                crypto/evp/evptests.txt (1.9.2.4), "Exp", lines: +6 -0

        Fix DES CFB-r.

2003-08-01 12:31  ben

        Changed:
                crypto/evp/evptests.txt (1.9.2.5), "Exp", lines: +4 -0

        DES CFB8 test.

2003-08-01 19:06  steve

        Changed:
                crypto/evp/evp_lib.c (1.6.8.2), "Exp", lines: +24 -0
                crypto/objects/obj_dat.h (1.49.2.17), "Exp", lines: +15 -46
                crypto/objects/obj_mac.h (1.19.2.17), "Exp", lines: +1 -24
                crypto/objects/obj_mac.num (1.15.2.13), "Exp", lines: +1 -4
                crypto/objects/objects.txt (1.20.2.18), "Exp", lines: +8 -12

        Make the EFB NIDs have empty OIDs aliased to the real EFB OID.

2003-08-11 11:56  levitte

        Changed:
                apps/Makefile.ssl (1.100.2.24), "Exp", lines: +1 -1

        Oops, removed a little too much.

2003-08-11 13:46  levitte

        Changed:
                test/Makefile.ssl (1.84.2.33), "Exp", lines: +28 -28

        Don't fiddle with LD_LIBRARY_PATH when building non-static.

2003-08-14 08:54  levitte

        Changed:
                apps/Makefile.ssl (1.100.2.25), "Exp", lines: +1 -1
                test/Makefile.ssl (1.84.2.34), "Exp", lines: +28 -28

        Undo the change that left LD_LIBRARY_PATH unchanged.  The errors I
        saw weren't due to that, but to a change on the SCO machines I used
        for testing, where my $PATH was suddenly incorrect.

2003-09-27 20:31  levitte

        Changed:
                apps/pkcs8.c (1.22.2.8), "Exp", lines: +5 -6

        Remove extra argument to BIO_printf().  PR: 685

2003-09-29 19:10  steve

        Changed:
                crypto/bio/bss_file.c (1.14.2.4), "Exp", lines: +2 -2

        Fix to make it compile under Win32.

2003-11-19 06:18  geoff

        Changed:
                crypto/x509/x509.h (1.116.2.4), "Exp", lines: +0 -4

        Remove duplicate prototypes have already been (correctly) added to
        rsa.h, as this is already included by x509.h anyway.

2004-01-21 10:58  appro

        Changed:
                Configure (1.314.2.89), "Exp", lines: +1 -0
                config (1.95.2.27), "Exp", lines: +7 -6
                crypto/bn/Makefile.ssl (1.65.2.7), "Exp", lines: +3 -0

        Proper support for HP-UX64 gcc build.  PR: 772

2004-01-29 10:41  levitte

        Changed:
                crypto/bn/bn_lcl.h (1.23.2.6), "Exp", lines: +8 -9

        Have the declarations match the definitions.

2004-03-16 06:50  steve

        Changed:
                apps/x509.c (1.67.2.14), "Exp", lines: +0 -1
                ssl/kssl.c (1.20.2.12), "Exp", lines: +2 -2

        Avoid warnings.

2004-03-17 05:01  mark

        Changed:
                CHANGES (1.977.2.128), "Exp", lines: +9 -1
                FAQ (1.61.2.30), "Exp", lines: +1 -1
                LICENSE (1.7.2.3), "Exp", lines: +1 -1
                NEWS (1.39.2.21), "Exp", lines: +8 -0
                README (1.39.2.24), "Exp", lines: +2 -2
                STATUS (1.211.2.41), "Exp", lines: +4 -1
                openssl.spec (1.6.2.6), "Exp", lines: +1 -1
                crypto/opensslv.h (1.40.2.21), "Exp", lines: +2 -2
                ssl/s3_pkt.c (1.46.2.6), "Exp", lines: +8 -0
                ssl/s3_srvr.c (1.85.2.20), "Exp", lines: +16 -0

        Fix null-pointer assignment in do_change_cipher_spec() revealed by
        using the Codenomicon TLS Test Tool (CAN-2004-0079) Fix flaw in
        SSL/TLS handshaking when using Kerberos ciphersuites
        (CAN-2004-0112) Ready for 0.9.7d build

                Submitted by: Steven Henson Reviewed by: Joe Orton Approved
        by: Mark Cox

2004-03-25 01:57  steve

        Changed:
                crypto/pkcs7/pk7_doit.c (1.50.2.9), "Exp", lines: +9 -4
                crypto/pkcs7/pk7_doit.c (1.50.2.4.2.2), "Exp", lines: +9 -4

        Make S/MIME encrypt work again.

2004-04-02 14:39  levitte

        Changed:
                crypto/bn/Makefile.ssl (1.65.2.8), "Exp", lines: +1 -1

        Typo.  "pa-rics2W" corrected to "pa-risc2W".  PR: 868

2004-05-12 12:09  levitte

        Changed:
                apps/apps.h (1.44.2.13), "Exp", lines: +0 -6
                crypto/o_str.c (1.5.2.1), "Exp", lines: +4 -3
                crypto/o_str.h (1.2.6.1), "Exp", lines: +0 -0

        The functions OPENSSL_strcasen?cmp() were forgotten when merging
        the FIPS branch into this.  It's needed at least for certain
        OpenVMS versions, and should really be used in a more general way.

2004-05-12 12:17  levitte

        Changed:
                crypto/Makefile (1.1.4.2), "Exp", lines: +3 -3

        Forgot to update the Makefile with the o_str stuff...

2004-05-12 16:11  ben

        Changed:
                crypto/rand/rand.h (1.26.2.8), "Exp", lines: +2 -0
                crypto/rand/rand_err.c (1.6.2.4), "Exp", lines: +2 -0
                fips/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
                fips/fips.c (1.1.2.4), "Exp", lines: +5 -1
                fips/rand/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
                fips/rand/fips_rand.c (1.1.2.5), "Exp", lines: +29 -0

        Blow up in people's faces if they don't reseed.

2004-05-12 19:53  steve

        Changed:
                apps/x509.c (1.67.2.16), "Exp", lines: +0 -7

        Fix memory leak.

2004-05-14 19:54  levitte

        Changed:
                util/libeay.num (1.173.2.20), "Exp", lines: +43 -54

        All EVP_*_cfb functions have changed names to EVP_*_cfb64 or
        EVP_*_cfb128.

2004-05-15 18:39  ben

        Changed:
                ssl/s23_clnt.c (1.20.2.6), "Exp", lines: +5 -2
                ssl/s2_clnt.c (1.37.2.11), "Exp", lines: +5 -2
                ssl/s2_srvr.c (1.36.2.8), "Exp", lines: +6 -3
                ssl/s3_clnt.c (1.53.2.17), "Exp", lines: +2 -1
                ssl/s3_srvr.c (1.85.2.22), "Exp", lines: +4 -2
                ssl/ssl_sess.c (1.40.2.8), "Exp", lines: +2 -1

        Check error returns.

2004-05-15 19:51  ben

        Changed:
                crypto/dh/dh.h (1.23.2.6), "Exp", lines: +1 -0
                crypto/dh/dh_err.c (1.6.2.3), "Exp", lines: +2 -1
                crypto/dh/dh_gen.c (1.8.8.2), "Exp", lines: +9 -0
                fips/fips_test_suite.c (1.1.4.2), "Exp", lines: +4 -3
                fips/aes/fips_aesavs.c (1.1.2.11), "Exp", lines: +49 -1
                fips/des/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
                fips/des/fips_desmovs.c (1.1.2.5), "Exp", lines: +49 -1
                fips/des/fips_set_key.c (1.1.4.2), "Exp", lines: +2 -0
                fips/sha1/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
                fips/sha1/fips_md32_common.h (1.1.2.4), "Exp", lines: +3 -0
                fips/sha1/standalone.sha1 (1.1.2.6), "Exp", lines: +1 -1

        Fix self-tests, ban some things in FIPS mode, fix copyrights.

2004-05-17 06:28  levitte

        Changed:
                util/mk1mf.pl (1.41.2.11), "Exp", lines: +8 -2
                util/pl/BC-16.pl (1.2.2.2), "Exp", lines: +9 -4
                util/pl/BC-32.pl (1.11.2.5), "Exp", lines: +8 -3
                util/pl/Mingw32.pl (1.12.6.6), "Exp", lines: +7 -2
                util/pl/OS2-EMX.pl (1.1.2.4), "Exp", lines: +7 -2
                util/pl/VC-16.pl (1.3.2.2), "Exp", lines: +7 -2
                util/pl/VC-32.pl (1.11.2.4), "Exp", lines: +7 -2
                util/pl/VC-CE.pl (1.1.2.6), "Exp", lines: +7 -2
                util/pl/linux.pl (1.3.6.1), "Exp", lines: +7 -2
                util/pl/ultrix.pl (1.2.8.2), "Exp", lines: +7 -2
                util/pl/unix.pl (1.2.8.1), "Exp", lines: +7 -2

        Generate SHA1 files on Windows and other platforms supported by
        mk1mf.pl, when building in FIPS mode.

                Note: UNTESTED!

2004-05-17 06:30  levitte

        Changed:
                apps/apps.h (1.44.2.14), "Exp", lines: +3 -0
                apps/openssl.c (1.48.2.10), "Exp", lines: +9 -5

        Make sure the applications know when we are running in FIPS mode.
        We can't use the variable in libcrypto, since it's supposedly
        unknown.

                Note: currently only supported in MONOLITH mode.

2004-05-17 06:31  levitte

        Changed:
                apps/enc.c (1.35.2.9), "Exp", lines: +10 -1

        When in FIPS mode, use SHA1 to digest the key, rather than MD5, as
        MD5 isn't a FIPS-approved algorithm.

                Note: this means the user needs to keep track of this, and
        we need to add support for that...

2004-05-17 06:39  levitte

        Changed:
                apps/enc.c (1.35.2.10), "Exp", lines: +14 -0

        Make it possible for the user to choose the digest used to create
        the key.

2004-05-17 06:40  levitte

        Changed:
                apps/enc.c (1.35.2.11), "Exp", lines: +4 -4

        Rewrite the usage to avoid confusion.

2004-05-17 06:47  levitte

        Changed:
                apps/enc.c (1.35.2.12), "Exp", lines: +1 -1

        Typo corretced.

2004-06-19 15:32  ben

        Changed:
                Makefile.org (1.154.2.81), "Exp", lines: +2 -7

        Make make tags make tags.

2004-06-19 15:54  ben

        Changed:
                apps/Makefile (1.1.4.3), "Exp", lines: +3 -3
                apps/prime.c (1.1.2.1), "Exp", lines: +115 -0
                apps/progs.h (1.26.2.3), "Exp", lines: +2 -0

        Add primality tester.

2004-06-21 20:05  levitte

        Changed:
                Makefile.org (1.154.2.82), "Exp", lines: +3 -1

        Standard sh doesn't tolerate ! as part of the conditional command.

                PR: 900

2004-06-24 14:12  steve

        Changed:
                apps/prime.c (1.1.2.2), "Exp", lines: +3 -0

        Include <string.h> to get definition of strcmp.

2004-06-24 14:31  steve

        Changed:
                crypto/evp/evp_lib.c (1.6.8.5), "Exp", lines: +2 -2

        Return an error if an attempt is made to encode or decode cipher
        ASN1 parameters and the cipher doesn't support it.

2004-07-04 18:36  steve

        Changed:
                crypto/asn1/p5_pbev2.c (1.20.2.2), "Exp", lines: +2 -1

        Fix memory leak.

2004-07-21 19:41  steve

        Changed:
                crypto/pem/pem_all.c (1.20.2.1), "Exp", lines: +119 -0

        When in FIPS mode write private keys in PKCS#8 and PBES2 format to
        avoid use of prohibited MD5 algorithm.

2004-07-23 15:20  ben

        Changed:
                fips/rand/fingerprint.sha1 (1.1.2.7), "Exp", lines: +1 -1
                fips/rand/fips_rand.c (1.1.2.7), "Exp", lines: +22 -7
                fips/rand/fips_randtest.c (1.1.2.5), "Exp", lines: +2 -2

        Convert to X9.31.

2004-07-24 15:40  appro

        Changed:
                ssl/ssl_cert.c (1.48.2.9), "Exp", lines: +5 -2

        Add casts where casts due. It's "safe" to cast, because "wrong"
        casts will either be optimized away or never performed. The trouble
        is that compiler first parses code, then optimizes, not both at
        once...

2004-07-27 16:09  levitte

        Changed:
                makevms.com (1.35.2.5), "Exp", lines: +1 -1

        Typo

2004-08-02 16:15  levitte

        Changed:
                crypto/cryptlib.c (1.32.2.13), "Exp", lines: +4 -4

        Let's lock a write lock when changing values, shall we?

                Thanks to Dr Stephen Henson <shenson@drh-consultancy.co.uk>
        for making me aware of this error.

2004-08-09 14:13  levitte

        Changed:
                makevms.com (1.35.2.8), "Exp", lines: +1 -1

        In the fips directory, we use FIPS-LIB.COM, not CRYPTO-LIB.COM...

2004-08-11 22:34  levitte

        Changed:
                apps/makeapps.com (1.18.2.6), "Exp", lines: +2 -2

        Another missing module in the VMS build files.  I believe this is
        the last, though...

2004-09-10 22:27  steve

        Changed:
                crypto/x509/x509_req.c (1.13.2.2), "Exp", lines: +1 -1

        Stop warning.

2004-09-11 11:45  levitte

        Changed:
                test/testenc.com (1.6.8.2), "Exp", lines: +1 -1

        Makefile.ssl changed name to Makefile...

2004-09-14 00:30  steve

        Changed:
                crypto/asn1/a_strex.c (1.8.2.6), "Exp", lines: +7 -2

        ASN1_STRING_to_UTF8() assumed that the MBSTRING_* flags were of the
        form MBSTRING_FLAG|nbyte where "nbyte" is the number of bytes per
        character.

                Unfortunately this isn't so and we can't change the
        #defines because this would break binary compatibility, so for
        0.9.7X only translate between the two.

2004-09-14 00:39  steve

        Changed:
                crypto/x509/x509_req.c (1.13.2.3), "Exp", lines: +1 -1

        Oops, forgot to reorder extension request nids.

2004-10-14 07:51  levitte

        Changed:
                VMS/mkshared.com (1.3.2.1), "Exp", lines: +8 -0

        We need to check for OPENSSL_FIPS when building shared libraries,
        so we get correct transfer vectors for those functions when
        required.

2004-10-26 13:47  steve

        Changed:
                util/mkfiles.pl (1.12.2.2), "Exp", lines: +1 -0

        Add fips/dh directory to mkfiles.pl

2004-11-11 02:18  steve

        Changed:
                crypto/engine/vendor_defns/sureware.h (1.2.2.1), "Exp", lines: +1 -1

        The use of "exp" as a variable name in a prototype causes a
        conflict with FC2 headers.

2004-11-27 13:55  steve

        Changed:
                apps/prime.c (1.1.2.3), "Exp", lines: +28 -17

        Fix leaks and give an error if no argument specified in prime.c

2004-11-27 14:02  steve

        Changed:
                apps/prime.c (1.1.2.4), "Exp", lines: +7 -8

        Remove unnecessary check and call BIO_free_all() on bio_out to
        avoid a leak on VMS.

2004-12-09 19:00  appro

        Changed:
                apps/openssl.c (1.48.2.11), "Exp", lines: +1 -1

        Eliminate dependency on UNICODE macro.

2004-12-20 14:18  appro

        Changed:
                util/mklink.pl (1.6.2.2), "Exp", lines: +1 -0

        When re-linking files, really relink them. In other words, emulate
        ln -f.

2004-12-28 00:48  appro

        Changed:
                Configure (1.314.2.103), "Exp", lines: +1 -2
                Makefile.org (1.154.2.92), "Exp", lines: +2 -2

        Cosmetic mingw update.  PR: 924

2005-01-09 18:58  appro

        Changed:
                crypto/evp/c_alld.c (1.4.2.1), "Exp", lines: +1 -1
                crypto/evp/m_sha.c (1.8.2.1), "Exp", lines: +1 -1
                crypto/sha/shatest.c (1.11.2.2), "Exp", lines: +2 -2

        Allow for ./config no-sha0.  PR: 993

2005-01-11 07:53  levitte

        Changed:
                apps/apps.c (1.49.2.31), "Exp", lines: +0 -16

        Remove VMS_strcasecmp() from apps.c, it's not used any more.  And
        besides, the implementation is bogus.

2005-01-31 02:40  steve

        Changed:
                crypto/asn1/a_verify.c (1.12.2.3), "Exp", lines: +7 -6

        Avoid memory leak.

2005-01-31 02:46  steve

        Changed:
                test/testss (1.7.2.1), "Exp", lines: +1 -1

        Use SHA1 for test certificates so FIPS SSL/TLS tests work.

2005-02-03 12:09  appro

        Changed:
                Configure (1.314.2.105), "Exp", lines: +2 -2
                Makefile.org (1.154.2.94), "Exp", lines: +16 -6
                TABLE (1.99.2.44), "Exp", lines: +2 -2

        Final HP-UX specific touches to "cope with run-time linker on
        multi-ABI platforms."

2005-03-12 10:28  appro

        Changed:
                Makefile.org (1.154.2.95), "Exp", lines: +9 -2
                apps/Makefile (1.1.4.13), "Exp", lines: +0 -1
                test/Makefile (1.1.4.9), "Exp", lines: +0 -1

        Move copying of .dll to apps/ and test/ to more appropriate place.

2005-03-12 13:15  appro

        Changed:
                apps/Makefile (1.1.4.14), "Exp", lines: +4 -2
                test/Makefile (1.1.4.10), "Exp", lines: +42 -194

        Fold rules in test/Makefile and provide hooks for updated FIPS
        build procedures.

2005-03-15 10:46  appro

        Changed:
                Makefile.org (1.154.2.96), "Exp", lines: +1 -1
                crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3
                fips/Makefile (1.1.4.8), "Exp", lines: +4 -1

        Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this
        in crypto/Makefile and make Makefile.org and fips/Makefile more
        discreet.

2005-03-26 20:32  appro

        Changed:
                crypto/perlasm/x86nasm.pl (1.2.8.8), "Exp", lines: +6 -1

        Resolve "operation size not specified" in NASM modules.

2005-04-03 21:16  appro

        Changed:
                Configure (1.314.2.109), "Exp", lines: +10 -0
                TABLE (1.99.2.48), "Exp", lines: +50 -0
                config (1.95.2.33), "Exp", lines: +9 -2
                crypto/bn/Makefile (1.1.4.4), "Exp", lines: +1 -0
                crypto/rc4/Makefile (1.1.4.6), "Exp", lines: +1 -1

        Extend Solaris x86 support to amd64. Note that if both gcc and Sun
        C are installed, it defaults to gcc, because it beats Sun C on
        every benchmark. Also note that gcc shared build was verified to
        work woth Sun C...

2005-04-14 00:47  appro

        Changed:
                Makefile.org (1.154.2.98), "Exp", lines: +1 -1

        Move cygcrypto.dll above cygwin.dll.

2005-04-15 10:00  nils

        Changed:
                doc/HOWTO/keys.txt (1.1.2.2), "Exp", lines: +3 -3
                doc/crypto/EVP_EncryptInit.pod (1.10.2.5), "Exp", lines: +3 -3

        EVP_CIPHER_CTX_init is a void function + fix typo

                PR: 1044 + 1045

2005-04-17 06:35  steve

        Changed:
                util/pl/VC-32.pl (1.11.2.6), "Exp", lines: +1 -1

        Include user32.lib to import MessageBoxIndirect

2005-04-19 16:21  appro

        Changed:
                Configure (1.314.2.117), "Exp", lines: +24 -21
                Makefile.org (1.154.2.100), "Exp", lines: +1 -11
                TABLE (1.99.2.52), "Exp", lines: +20 -20
                apps/Makefile (1.1.4.15), "Exp", lines: +1 -1
                test/Makefile (1.1.4.12), "Exp", lines: +1 -1

        Enable shared link on HP-UX.

2005-04-20 10:27  steve

        Changed:
                Configure (1.314.2.118), "Exp", lines: +1 -1
                util/mk1mf.pl (1.41.2.12), "Exp", lines: +2 -0

        Ignore zlib related options in mk1mf.pl

2005-04-20 18:42  steve

        Changed:
                Configure (1.314.2.119), "Exp", lines: +2 -2

        Don't use kerberos library locations on windows.

2005-04-22 07:17  steve

        Changed:
                CHANGES (1.977.2.156), "Exp", lines: +5 -0
                crypto/bn/bn.h (1.66.2.4), "Exp", lines: +2 -0
                crypto/bn/bn_mont.c (1.30.2.3), "Exp", lines: +20 -0
                crypto/dh/dh_key.c (1.16.2.4), "Exp", lines: +14 -10
                crypto/dsa/dsa_ossl.c (1.12.2.7), "Exp", lines: +12 -9
                crypto/rsa/rsa_eay.c (1.28.2.10), "Exp", lines: +16 -90
                fips/fipshashes.c (1.1.2.5), "Exp", lines: +3 -3
                fips/dh/fips_dh_key.c (1.1.2.4), "Exp", lines: +13 -10
                fips/dsa/fips_dsa_ossl.c (1.1.2.8), "Exp", lines: +12 -9
                fips/rsa/fips_rsa_eay.c (1.1.4.5), "Exp", lines: +17 -90

        New function BN_MONT_CTX_set_locked, to set montgomery parameters
        in a threadsafe manner.

                Modify or add calls to use it in rsa, dsa and dh
        algorithms.

2005-04-23 06:46  nils

        Changed:
                crypto/dsa/dsa_ossl.c (1.12.2.8), "Exp", lines: +1 -1
                crypto/rsa/rsa_eay.c (1.28.2.11), "Exp", lines: +4 -4

        fix typo