1 This file, together with ChangeLog.0_9_7-stable_not-in-head_FIPS,
2 provides a collection of those CVS change log entries for the
3 0.9.7 branch (OpenSSL_0_9_7-stable) that do not appear similarly in
6 ChangeLog.0_9_7-stable_not-in-head_FIPS - "FIPS" related changes
7 ChangeLog.0_9_7-stable_not-in-head - everything else
9 Some obvious false positives have been eliminated: e.g., we do not
10 care about a simple "make update"; and we don't care about changes
11 identified to the 0.9.7 branch that were explicitly identified as
14 Eliminating all other entries (and finally this file and its
15 compantion), either as false positives or as things that should go
16 into 0.9.8, remains to be done. Any additional changes to 0.9.7 that
17 are not immediately put into 0.9.8, but belong there as well, should
18 be added to the end of this file.
21 2002-02-14 03:43 levitte
24 crypto/des/str2key.c (1.12.2.1), "Exp", lines: +12 -0
26 Because making the key strong by xoring the last byte with 0xF0
27 generates different keys than previous versions of OpenSSL and
28 libdes, let's make Assar's change experimental for now.
30 2002-02-14 14:42 levitte
33 crypto/err/err.c (1.51.2.1), "Exp", lines: +1 -1
35 For some reason, getting the topmost error was done the same way as
36 getting the bottommost one. I hope I understood correctly how this
37 should be done. It seems to work when running evp_test in an
38 environment where it can't find openssl.cnf.
40 2002-02-14 14:51 levitte
43 crypto/des/read2pwd.c (1.6.2.1), "Exp", lines: +1 -0
45 Make sure memset() is defined by including string.h Notified by
46 Oscar Jacobsson <oscar@jacobsson.org>
48 2002-02-14 17:23 levitte
51 crypto/ui/ui_openssl.c (1.11.2.1), "Exp", lines: +7 -1
52 crypto/rsa/rsa.h (1.36.2.1), "Exp", lines: +6 -6
53 crypto/rand/rand_egd.c (1.16.2.1), "Exp", lines: +5 -1
54 crypto/des/read_pwd.c (1.26.2.1), "Exp", lines: +7 -1
55 crypto/bio/bss_log.c (1.30.2.1), "Exp", lines: +1 -1
56 crypto/bio/bss_bio.c (1.31.2.1), "Exp", lines: +5 -0
57 crypto/tmdiff.c (1.9.2.1), "Exp", lines: +17 -2
58 apps/speed.c (1.83.2.1), "Exp", lines: +20 -4
59 apps/ca.c (1.102.2.1), "Exp", lines: +1 -1
60 apps/s_time.c (1.23.2.1), "Exp", lines: +20 -2
61 Configure (1.314.2.3), "Exp", lines: +3 -0
62 e_os.h (1.56.2.1), "Exp", lines: +9 -1
64 Add the configuration target VxWorks.
66 2002-02-14 19:46 steve
69 crypto/engine/hw_sureware.c (1.2.2.1), "Exp", lines: +8 -4
73 #if out some unused function.
75 "index" is a global function on some platforms.
77 2002-02-14 19:52 steve
80 crypto/tmdiff.c (1.9.2.2), "Exp", lines: +1 -0
84 2002-02-15 00:38 steve
87 CHANGES (1.977.2.2), "Exp", lines: +5 -0
88 crypto/conf/conf.h (1.30.2.1), "Exp", lines: +2 -1
89 crypto/conf/conf_mall.c (1.6.2.1), "Exp", lines: +6 -7
90 crypto/conf/conf_mod.c (1.8.2.1), "Exp", lines: +8 -0
92 Add argument to OPENSSL_config() and add flag to tolerate missing
95 2002-02-15 01:12 steve
98 NEWS (1.39.2.1), "Exp", lines: +5 -1
102 2002-02-15 01:33 steve
105 crypto/asn1/asn1.h (1.103.2.1), "Exp", lines: +3 -0
106 crypto/asn1/asn1_err.c (1.42.2.1), "Exp", lines: +3 -0
107 crypto/asn1/asn_moid.c (1.2.2.1), "Exp", lines: +21 -10
108 crypto/conf/conf_mod.c (1.8.2.2), "Exp", lines: +2 -6
110 Don't call finish function if it isn't set.
114 2002-02-15 01:58 steve
117 crypto/x509/x509_vfy.c (1.56.2.1), "Exp", lines: +23 -13
119 Allow a NULL store parameter to X509_STORE_CTX_init().
121 2002-02-15 02:01 steve
124 crypto/evp/evp_enc.c (1.28.2.1), "Exp", lines: +2 -1
126 Only initialize cipher ctx if cipher is not NULL.
128 2002-02-15 03:43 steve
131 crypto/conf/conf_mod.c (1.8.2.3), "Exp", lines: +1 -1
133 Add flag to disable config module DSO loading.
135 2002-02-20 00:24 steve
138 CHANGES (1.977.2.3), "Exp", lines: +4 -0
139 apps/apps.c (1.49.2.1), "Exp", lines: +20 -0
140 crypto/conf/conf_mall.c (1.6.2.3), "Exp", lines: +2 -14
141 crypto/conf/conf_mod.c (1.8.2.4), "Exp", lines: +15 -1
143 Use default openssl.cnf if config filename set to NULL and
144 openssl_conf if appname NULL.
146 2002-02-23 14:43 steve
149 crypto/asn1/asn_moid.c (1.2.2.2), "Exp", lines: +0 -1
153 2002-02-26 22:42 jaenicke
156 CHANGES (1.977.2.6), "Exp", lines: +4 -0
157 ssl/ssl_lib.c (1.110.2.1), "Exp", lines: +6 -8
159 Make sure that bad sessions are removed in SSL_clear() (found by
160 Yoram Zahavi). Submitted by: Reviewed by: PR:
165 Configure (1.314.2.6), "Exp", lines: +1 -0
169 2002-03-08 20:12 steve
172 apps/apps.c (1.49.2.4), "Exp", lines: +1 -1
176 2002-03-22 03:36 levitte
179 apps/version.c (1.13.2.1), "Exp", lines: +2 -2
180 apps/speed.c (1.83.2.6), "Exp", lines: +6 -6
181 apps/passwd.c (1.24.2.2), "Exp", lines: +2 -2
183 Use the more modern DES API in the openssl subcommands.
185 2002-03-22 11:29 levitte
188 crypto/des/des_old.h (1.9.2.4), "Exp", lines: +35 -23
190 Key schedules are given as arguments a bit differently in 0.9.6 and
191 earlier. Also, a few 0.9.6 functions were missing their mappings.
193 2002-03-22 11:46 levitte
196 crypto/des/destest.c (1.30.2.2), "Exp", lines: +37 -35
198 Key schedules are given as arguments a bit differently in 0.9.6 and
199 earlier. Also, it was an error to define crypt() at all times.
201 2002-03-26 15:25 levitte
204 CHANGES (1.977.2.15), "Exp", lines: +19 -8
205 crypto/des/des.h (1.40.2.2), "Exp", lines: +6 -0
207 Add the possibility to enable olde des support, not just disable
208 it, for future support. Redocument
210 2002-04-15 15:28 jaenicke
213 crypto/objects/obj_dat.h (1.49.2.5), "Exp", lines: +4 -4
214 crypto/objects/obj_mac.h (1.19.2.5), "Exp", lines: +1 -1
215 crypto/objects/objects.txt (1.20.2.5), "Exp", lines: +7 -2
217 Use the "mail" short name according to RFC2798 (Michael Bell
218 <michael.bell@rz.hu-berlin.de>). Submitted by: Reviewed by: PR:
220 2002-04-20 12:25 levitte
223 util/mk1mf.pl (1.41.2.1), "Exp", lines: +4 -1
225 Make sure ec is properly handled in Windows.
230 crypto/conf/conf_mod.c (1.8.2.6), "Exp", lines: +1 -1
234 2002-05-11 14:42 steve
237 ssl/ssl_cert.c (1.48.2.3), "Exp", lines: +0 -1
240 closedir is not used on Win32.
242 2002-05-22 09:53 levitte
245 apps/speed.c (1.83.2.7), "Exp", lines: +4 -1
247 Remove warnings about unused symbols when configured with no-rsa.
249 2002-05-22 09:55 levitte
252 crypto/asn1/x_pubkey.c (1.21.2.1), "Exp", lines: +1 -1
254 Remove warnings about uninitialised variables. This has already
255 been applied in the main branch.
257 2002-05-22 09:56 levitte
260 crypto/engine/hw_4758_cca.c (1.1.2.4), "Exp", lines: +14 -14
262 Use 0 instead of NULL when casting to function pointers, to avoid
263 warnings from compilers when NULL is defined as '((void *)0)'.
264 This has already been applied in the main branch.
266 2002-05-22 09:58 levitte
269 util/mkerr.pl (1.18.2.1), "Exp", lines: +2 -2
271 Update copyright years. This has already been applied in the main
274 2002-05-23 17:25 levitte
277 VMS/tcpip_shr_decc.opt (1.1.4.1), "Exp", lines: +1 -0
284 crypto/evp/evp_test.c (1.14.2.5), "Exp", lines: +1 -1
288 2002-06-05 08:45 levitte
291 ssl/ssl-lib.com (1.11.2.3), "Exp", lines: +1 -1
292 test/maketests.com (1.13.2.2), "Exp", lines: +29 -1
294 Correct syntax in ssl-lib.com maketests.com was missing the TCP/IP
295 options TCPIP and NONE
297 2002-07-30 13:30 jaenicke
300 NEWS (1.39.2.11), "Exp", lines: +1 -1
302 Typo. Submitted by: Reviewed by: PR:
304 2002-08-13 14:19 levitte
307 demos/engines/rsaref/Makefile (1.3.2.1), "Exp", lines: +1 -1
309 Export text symbols as well (AIX experts might need to correct me
312 2002-08-13 14:26 levitte
315 demos/engines/cluster_labs/Makefile (1.1.2.1), "Exp", lines: +114 -0
316 demos/engines/cluster_labs/cluster_labs.h (1.1.2.1), "Exp", lines: +35 -0
317 demos/engines/cluster_labs/hw_cluster_labs.c (1.1.2.1), "Exp", lines: +718 -0
318 demos/engines/cluster_labs/hw_cluster_labs.ec (1.1.2.1), "Exp", lines: +8 -0
319 demos/engines/cluster_labs/hw_cluster_labs_err.c (1.1.2.1), "Exp", lines: +151 -0
320 demos/engines/cluster_labs/hw_cluster_labs_err.h (1.1.2.1), "Exp", lines: +95 -0
321 demos/engines/ibmca/Makefile (1.1.2.1), "Exp", lines: +114 -0
322 demos/engines/ibmca/hw_ibmca.c (1.1.2.1), "Exp", lines: +917 -0
323 demos/engines/ibmca/hw_ibmca.ec (1.1.2.1), "Exp", lines: +8 -0
324 demos/engines/ibmca/hw_ibmca_err.c (1.1.2.1), "Exp", lines: +154 -0
325 demos/engines/ibmca/hw_ibmca_err.h (1.1.2.1), "Exp", lines: +98 -0
326 demos/engines/ibmca/ica_openssl_api.h (1.1.2.1), "Exp", lines: +189 -0
327 demos/engines/zencod/Makefile (1.1.2.1), "Exp", lines: +114 -0
328 demos/engines/zencod/hw_zencod.c (1.1.2.1), "Exp", lines: +1736 -0
329 demos/engines/zencod/hw_zencod.ec (1.1.2.1), "Exp", lines: +8 -0
330 demos/engines/zencod/hw_zencod.h (1.1.2.1), "Exp", lines: +160 -0
331 demos/engines/zencod/hw_zencod_err.c (1.1.2.1), "Exp", lines: +151 -0
332 demos/engines/zencod/hw_zencod_err.h (1.1.2.1), "Exp", lines: +95 -0
334 OK, I've amused myself with making sure the engines that have been
335 contributed TO WORK WITH 0.9.7 can be built as dynamically loadable
338 For now, they're not included in crypto/engine/ since 0.9.7
339 is in feature freeze. Further discussion might change that, but
340 don't hold your breath.
342 2002-08-15 13:48 levitte
345 crypto/crypto-lib.com (1.53.2.8), "Exp", lines: +1 -1
347 I think that's the last forgotten compilation module.
349 2002-08-16 18:44 jaenicke
352 README (1.39.2.9), "Exp", lines: +1 -1
354 Fix wrong URI. Submitted by: Mike Castle <dalgoda@ix.netcom.com>
357 2002-10-05 13:59 steve
360 crypto/engine/hw_cswift.c (1.17.2.4), "Exp", lines: +1 -1
362 Win32 fix (signed/unsigned compare error).
364 2002-10-09 14:19 levitte
367 crypto/engine/hw_cswift.c (1.17.2.5), "Exp", lines: +1 -0
369 The dissapearing destroy callback reappears
371 2002-10-24 00:09 levitte
374 crypto/crypto-lib.com (1.53.2.9), "Exp", lines: +1 -1
376 An engine changed name.
378 2002-10-29 18:46 geoff
381 doc/ssl/SSL_CTX_set_session_cache_mode.pod (1.5.2.2), "Exp", lines: +1 -0
383 Correct another inconsistency in my recent commits.
385 2002-11-04 17:33 levitte
388 Configure (1.314.2.38), "Exp", lines: +4 -2
390 Return my normal debug targets to something not so extreme, and
391 make the extreme ones special (or 'extreme', if you will :-)).
393 2002-11-13 12:35 levitte
396 crypto/cryptlib.h (1.10.2.4), "Exp", lines: +0 -4
397 crypto/crypto.h (1.62.2.3), "Exp", lines: +4 -0
399 Make OpenSSLdie() visible (it's a must to get a proper reference in
402 2002-11-13 14:36 levitte
405 crypto/pem/pem_lib.c (1.36.2.5), "Exp", lines: +1 -1
407 C++ comments in C code, 'nuff said...
409 2002-11-13 15:30 levitte
412 demos/engines/ibmca/hw_ibmca.c (1.1.2.2), "Exp", lines: +3 -0
413 demos/engines/zencod/hw_zencod.c (1.1.2.2), "Exp", lines: +4 -1
414 demos/engines/cluster_labs/hw_cluster_labs.c (1.1.2.2), "Exp", lines: +5 -2
416 The loading functions should be static if we build a dynamic
419 2002-12-12 18:41 levitte
422 crypto/engine/hw_ncipher.c (1.26.2.7), "Exp", lines: +38 -2
423 crypto/engine/hw_ncipher_err.c (1.1.2.2), "Exp", lines: +1 -1
424 crypto/engine/hw_ncipher_err.h (1.1.2.2), "Exp", lines: +1 -1
425 crypto/cryptlib.c (1.32.2.8), "Exp", lines: +2 -1
426 crypto/crypto.h (1.62.2.7), "Exp", lines: +2 -1
427 CHANGES (1.977.2.78), "Exp", lines: +14 -0
429 Add a static lock called HWCRHK, for the case of having an
430 application that wants to use the hw_ncipher engine without having
431 given any callbacks for the dynamic type of locks.
433 2002-12-15 16:27 appro
436 Makefile.org (1.154.2.41), "Exp", lines: +2 -1
438 Another Solaris shared build clean-up. This is not actually needed
439 if one uses WorkShop C. It's gcc driver that brings copy of
440 libgcc.a into .so otherwise. In case you wonder what it's -Wl,-z...
441 and not just -z. Problem is that gcc driver apparently omits all -z
442 options but -z text. Don't ask me why. I'm not committing
443 corresponding workaround into the HEAD as Makefile.shared
444 reportedly needs even more work...
446 2002-12-16 19:17 appro
449 crypto/bn/bn_lcl.h (1.23.2.3), "Exp", lines: +3 -0
450 crypto/bn/bn_mul.c (1.28.2.4), "Exp", lines: +84 -445
452 This is rollback to 0.9.6h bn_mul.c to address problem reported in
455 2002-12-16 19:59 appro
458 Makefile.org (1.154.2.42), "Exp", lines: +3 -1
460 Some of Sun compiler drivers (well, one of those I have) collect
461 all options specified with -Wl in the beginnig of the ld command
462 line which kind of obsoletes the idea as it's -z defaultextract
463 that will be closest to lib*.a and not -z allextract:-(
465 2002-12-17 15:21 levitte
468 NEWS (1.39.2.16), "Exp", lines: +4 -1
470 A few more NEWS items.
472 !2002-12-27 17:49 appro
475 ! Configure (1.314.2.62), "Exp", lines: +1 -1
477 ! According to Tim Rice <tim@multitalents.net> assembler support in
478 ! SCO5 never worked anyway. Note this is not going to HEAD as we
479 ! intend to provide an alternative solution as soon as 0.9.7 is out.
481 2002-12-28 02:35 levitte
484 Configure (1.314.2.63), "Exp", lines: +1 -1
486 Hmm, the variables $x96_elf_asm and others contain a number of
487 colons, so when removing one reference, if should be replaced with
488 the appropriate number of colons, or chaos will follow...
490 It's rather silly to believe we'd release 0.9.7a in 2002 :-).
495 crypto/des/des_locl.h (1.19.2.5), "Exp", lines: +1 -1
496 crypto/rc5/rc5_locl.h (1.3.2.4), "Exp", lines: +1 -1
498 Fix warnings, use correct -Ds.
500 2003-03-24 17:57 steve
503 crypto/x509/x509_vfy.c (1.56.2.5), "Exp", lines: +2 -2
504 crypto/x509/x509_vfy.c (1.56.2.6), "Exp", lines: +2 -2
506 Get X509_V_FLAG_CRL_CHECK_ALL logic the right way round. PR:544
508 ? 2003-04-04 16:21 levitte
511 util/mkdef.pl (1.67.2.5), "Exp", lines: +10 -5
512 util/mkerr.pl (1.18.2.3), "Exp", lines: +6 -6
514 Transfer the changes to detect multiline comments and the GCC
515 extension __attribute__.
517 2003-04-08 13:54 levitte
520 test/Makefile.ssl (1.84.2.25), "Exp", lines: +29 -1
521 apps/Makefile.ssl (1.100.2.22), "Exp", lines: +1 -0
522 Makefile.org (1.154.2.61), "Exp", lines: +4 -5
524 Set LD_LIBRARY_PATH when linking, since OpenUnix' ld uses it to
525 create a library search path.
529 2003-04-09 07:25 levitte
532 test/Makefile.ssl (1.84.2.26), "Exp", lines: +1 -1
536 2003-04-09 08:50 levitte
539 apps/Makefile.ssl (1.100.2.23), "Exp", lines: +1 -0
543 2003-04-10 03:13 steve
546 crypto/rsa/rsa_sign.c (1.11.2.6), "Exp", lines: +2 -2
548 Only call redirected rsa_sign or rsa_verify if the pointer is set.
550 This allows, for example, a smart card to redirect rsa_sign
551 and keep the default rsa_verify.
553 2003-07-03 23:43 levitte
556 Makefile.org (1.154.2.65), "Exp", lines: +2 -2
558 Add a slash so grep doesn't return both ./crypto/bio/bss_mem.o and
559 ./crypto/mem.o when we're looking for mem.o.
564 crypto/aes/aes.h (1.1.2.5), "Exp", lines: +3 -0
565 crypto/aes/aes_cfb.c (1.1.2.4), "Exp", lines: +57 -0
567 Add untested CFB-r mode. Will be tested soon.
572 Makefile.org (1.154.2.69), "Exp", lines: +5 -1
573 crypto/aes/aes.h (1.1.2.6), "Exp", lines: +3 -0
574 crypto/aes/aes_cfb.c (1.1.2.5), "Exp", lines: +19 -0
575 crypto/dsa/Makefile.ssl (1.49.2.6), "Exp", lines: +3 -2
576 crypto/err/Makefile.ssl (1.48.2.4), "Exp", lines: +17 -16
577 crypto/evp/e_aes.c (1.6.2.5), "Exp", lines: +8 -0
578 crypto/evp/e_des.c (1.5.2.2), "Exp", lines: +1 -1
579 crypto/evp/e_des3.c (1.8.2.3), "Exp", lines: +2 -2
580 crypto/evp/evp.h (1.86.2.11), "Exp", lines: +28 -11
581 crypto/evp/evp_locl.h (1.7.2.3), "Exp", lines: +2 -2
582 crypto/objects/obj_dat.h (1.49.2.13), "Exp", lines: +10 -5
583 crypto/objects/obj_mac.h (1.19.2.13), "Exp", lines: +5 -0
584 crypto/objects/obj_mac.num (1.15.2.9), "Exp", lines: +1 -0
585 crypto/objects/objects.txt (1.20.2.14), "Exp", lines: +4 -0
586 fips/Makefile.ssl (1.1.2.3), "Exp", lines: +7 -0
587 fips/aes/Makefile.ssl (1.1.2.2), "Exp", lines: +23 -1
588 fips/aes/fips_aesavs.c (1.1.2.3), "Exp", lines: +9 -1
589 test/Makefile.ssl (1.84.2.30), "Exp", lines: +101 -43
591 Add support for partial CFB modes, make tests work, update
597 crypto/aes/aes_cfb.c (1.1.2.6), "Exp", lines: +9 -6
598 crypto/evp/c_allc.c (1.8.2.3), "Exp", lines: +1 -0
599 crypto/evp/evp_test.c (1.14.2.11), "Exp", lines: +17 -8
600 crypto/evp/evptests.txt (1.9.2.2), "Exp", lines: +48 -1
602 Working CFB1 and test vectors.
607 crypto/evp/e_aes.c (1.6.2.6), "Exp", lines: +14 -0
608 crypto/objects/obj_dat.h (1.49.2.14), "Exp", lines: +15 -5
609 crypto/objects/obj_mac.h (1.19.2.14), "Exp", lines: +10 -0
610 crypto/objects/obj_mac.num (1.15.2.10), "Exp", lines: +2 -0
611 crypto/objects/objects.txt (1.20.2.15), "Exp", lines: +2 -0
612 fips/aes/Makefile.ssl (1.1.2.3), "Exp", lines: +1 -1
613 fips/aes/fips_aesavs.c (1.1.2.4), "Exp", lines: +34 -19
615 The rest of the keysizes for CFB1, working AES AVS test for CFB1.
620 crypto/aes/aes.h (1.1.2.7), "Exp", lines: +3 -0
621 crypto/aes/aes_cfb.c (1.1.2.7), "Exp", lines: +14 -0
622 crypto/evp/c_allc.c (1.8.2.4), "Exp", lines: +1 -0
623 crypto/evp/e_aes.c (1.6.2.7), "Exp", lines: +4 -9
624 crypto/evp/evptests.txt (1.9.2.3), "Exp", lines: +48 -0
625 crypto/objects/obj_dat.h (1.49.2.15), "Exp", lines: +20 -5
626 crypto/objects/obj_mac.h (1.19.2.15), "Exp", lines: +15 -0
627 crypto/objects/obj_mac.num (1.15.2.11), "Exp", lines: +3 -0
628 crypto/objects/objects.txt (1.20.2.16), "Exp", lines: +3 -0
629 fips/aes/fips_aesavs.c (1.1.2.7), "Exp", lines: +11 -0
636 Makefile.org (1.154.2.70), "Exp", lines: +16 -5
637 crypto/des/cfb_enc.c (1.7.2.1), "Exp", lines: +2 -1
638 crypto/des/des_enc.c (1.11.2.2), "Exp", lines: +4 -0
639 crypto/evp/e_aes.c (1.6.2.8), "Exp", lines: +7 -14
640 crypto/evp/e_des.c (1.5.2.3), "Exp", lines: +37 -1
641 crypto/evp/evp.h (1.86.2.12), "Exp", lines: +6 -0
642 crypto/evp/evp_locl.h (1.7.2.4), "Exp", lines: +9 -0
643 crypto/objects/obj_dat.h (1.49.2.16), "Exp", lines: +48 -23
644 crypto/objects/obj_mac.h (1.19.2.16), "Exp", lines: +31 -6
645 crypto/objects/obj_mac.num (1.15.2.12), "Exp", lines: +5 -0
646 crypto/objects/objects.txt (1.20.2.17), "Exp", lines: +12 -6
647 fips/Makefile.ssl (1.1.2.4), "Exp", lines: +8 -1
648 fips/fips_make_sha1 (1.1.2.3), "Exp", lines: +3 -0
649 fips/aes/Makefile.ssl (1.1.2.4), "Exp", lines: +1 -1
650 fips/des/.cvsignore (1.1.2.1), "Exp", lines: +3 -0
651 fips/des/Makefile.ssl (1.1.2.1), "Exp", lines: +96 -0
652 fips/des/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
653 fips/des/fips_des_enc.c (1.1.2.1), "Exp", lines: +288 -0
654 fips/des/fips_des_locl.h (1.1.2.1), "Exp", lines: +428 -0
655 fips/des/fips_desmovs.c (1.1.2.1), "Exp", lines: +659 -0
657 Whoops, forgot FIPS DES, also add EVPs for DES CFB1 and 8.
659 2003-07-31 23:30 levitte
662 Makefile.org (1.154.2.71), "Exp", lines: +2 -0
664 If FDIRS is to be treated like SDIRS, let's not forget to
665 initialize it in Makefile.org.
670 crypto/des/cfb_enc.c (1.7.2.2), "Exp", lines: +45 -36
671 crypto/evp/c_allc.c (1.8.2.5), "Exp", lines: +2 -0
672 crypto/evp/e_des.c (1.5.2.4), "Exp", lines: +8 -3
673 crypto/evp/evptests.txt (1.9.2.4), "Exp", lines: +6 -0
680 crypto/evp/evptests.txt (1.9.2.5), "Exp", lines: +4 -0
684 2003-08-01 19:06 steve
687 crypto/evp/evp_lib.c (1.6.8.2), "Exp", lines: +24 -0
688 crypto/objects/obj_dat.h (1.49.2.17), "Exp", lines: +15 -46
689 crypto/objects/obj_mac.h (1.19.2.17), "Exp", lines: +1 -24
690 crypto/objects/obj_mac.num (1.15.2.13), "Exp", lines: +1 -4
691 crypto/objects/objects.txt (1.20.2.18), "Exp", lines: +8 -12
693 Make the EFB NIDs have empty OIDs aliased to the real EFB OID.
695 2003-08-11 11:56 levitte
698 apps/Makefile.ssl (1.100.2.24), "Exp", lines: +1 -1
700 Oops, removed a little too much.
702 2003-08-11 13:46 levitte
705 test/Makefile.ssl (1.84.2.33), "Exp", lines: +28 -28
707 Don't fiddle with LD_LIBRARY_PATH when building non-static.
709 2003-08-14 08:54 levitte
712 apps/Makefile.ssl (1.100.2.25), "Exp", lines: +1 -1
713 test/Makefile.ssl (1.84.2.34), "Exp", lines: +28 -28
715 Undo the change that left LD_LIBRARY_PATH unchanged. The errors I
716 saw weren't due to that, but to a change on the SCO machines I used
717 for testing, where my $PATH was suddenly incorrect.
719 2003-09-27 20:31 levitte
722 apps/pkcs8.c (1.22.2.8), "Exp", lines: +5 -6
724 Remove extra argument to BIO_printf(). PR: 685
726 2003-09-29 19:10 steve
729 crypto/bio/bss_file.c (1.14.2.4), "Exp", lines: +2 -2
731 Fix to make it compile under Win32.
733 2003-11-19 06:18 geoff
736 crypto/x509/x509.h (1.116.2.4), "Exp", lines: +0 -4
738 Remove duplicate prototypes have already been (correctly) added to
739 rsa.h, as this is already included by x509.h anyway.
741 2004-01-21 10:58 appro
744 Configure (1.314.2.89), "Exp", lines: +1 -0
745 config (1.95.2.27), "Exp", lines: +7 -6
746 crypto/bn/Makefile.ssl (1.65.2.7), "Exp", lines: +3 -0
748 Proper support for HP-UX64 gcc build. PR: 772
750 2004-01-29 10:41 levitte
753 crypto/bn/bn_lcl.h (1.23.2.6), "Exp", lines: +8 -9
755 Have the declarations match the definitions.
757 2004-03-16 06:50 steve
760 apps/x509.c (1.67.2.14), "Exp", lines: +0 -1
761 ssl/kssl.c (1.20.2.12), "Exp", lines: +2 -2
765 2004-03-17 05:01 mark
768 CHANGES (1.977.2.128), "Exp", lines: +9 -1
769 FAQ (1.61.2.30), "Exp", lines: +1 -1
770 LICENSE (1.7.2.3), "Exp", lines: +1 -1
771 NEWS (1.39.2.21), "Exp", lines: +8 -0
772 README (1.39.2.24), "Exp", lines: +2 -2
773 STATUS (1.211.2.41), "Exp", lines: +4 -1
774 openssl.spec (1.6.2.6), "Exp", lines: +1 -1
775 crypto/opensslv.h (1.40.2.21), "Exp", lines: +2 -2
776 ssl/s3_pkt.c (1.46.2.6), "Exp", lines: +8 -0
777 ssl/s3_srvr.c (1.85.2.20), "Exp", lines: +16 -0
779 Fix null-pointer assignment in do_change_cipher_spec() revealed by
780 using the Codenomicon TLS Test Tool (CAN-2004-0079) Fix flaw in
781 SSL/TLS handshaking when using Kerberos ciphersuites
782 (CAN-2004-0112) Ready for 0.9.7d build
784 Submitted by: Steven Henson Reviewed by: Joe Orton Approved
787 2004-03-25 01:57 steve
790 crypto/pkcs7/pk7_doit.c (1.50.2.9), "Exp", lines: +9 -4
791 crypto/pkcs7/pk7_doit.c (1.50.2.4.2.2), "Exp", lines: +9 -4
793 Make S/MIME encrypt work again.
795 2004-04-02 14:39 levitte
798 crypto/bn/Makefile.ssl (1.65.2.8), "Exp", lines: +1 -1
800 Typo. "pa-rics2W" corrected to "pa-risc2W". PR: 868
802 2004-05-12 12:09 levitte
805 apps/apps.h (1.44.2.13), "Exp", lines: +0 -6
806 crypto/o_str.c (1.5.2.1), "Exp", lines: +4 -3
807 crypto/o_str.h (1.2.6.1), "Exp", lines: +0 -0
809 The functions OPENSSL_strcasen?cmp() were forgotten when merging
810 the FIPS branch into this. It's needed at least for certain
811 OpenVMS versions, and should really be used in a more general way.
813 2004-05-12 12:17 levitte
816 crypto/Makefile (1.1.4.2), "Exp", lines: +3 -3
818 Forgot to update the Makefile with the o_str stuff...
823 crypto/rand/rand.h (1.26.2.8), "Exp", lines: +2 -0
824 crypto/rand/rand_err.c (1.6.2.4), "Exp", lines: +2 -0
825 fips/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
826 fips/fips.c (1.1.2.4), "Exp", lines: +5 -1
827 fips/rand/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
828 fips/rand/fips_rand.c (1.1.2.5), "Exp", lines: +29 -0
830 Blow up in people's faces if they don't reseed.
832 2004-05-12 19:53 steve
835 apps/x509.c (1.67.2.16), "Exp", lines: +0 -7
839 2004-05-14 19:54 levitte
842 util/libeay.num (1.173.2.20), "Exp", lines: +43 -54
844 All EVP_*_cfb functions have changed names to EVP_*_cfb64 or
850 ssl/s23_clnt.c (1.20.2.6), "Exp", lines: +5 -2
851 ssl/s2_clnt.c (1.37.2.11), "Exp", lines: +5 -2
852 ssl/s2_srvr.c (1.36.2.8), "Exp", lines: +6 -3
853 ssl/s3_clnt.c (1.53.2.17), "Exp", lines: +2 -1
854 ssl/s3_srvr.c (1.85.2.22), "Exp", lines: +4 -2
855 ssl/ssl_sess.c (1.40.2.8), "Exp", lines: +2 -1
862 crypto/dh/dh.h (1.23.2.6), "Exp", lines: +1 -0
863 crypto/dh/dh_err.c (1.6.2.3), "Exp", lines: +2 -1
864 crypto/dh/dh_gen.c (1.8.8.2), "Exp", lines: +9 -0
865 fips/fips_test_suite.c (1.1.4.2), "Exp", lines: +4 -3
866 fips/aes/fips_aesavs.c (1.1.2.11), "Exp", lines: +49 -1
867 fips/des/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
868 fips/des/fips_desmovs.c (1.1.2.5), "Exp", lines: +49 -1
869 fips/des/fips_set_key.c (1.1.4.2), "Exp", lines: +2 -0
870 fips/sha1/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
871 fips/sha1/fips_md32_common.h (1.1.2.4), "Exp", lines: +3 -0
872 fips/sha1/standalone.sha1 (1.1.2.6), "Exp", lines: +1 -1
874 Fix self-tests, ban some things in FIPS mode, fix copyrights.
876 2004-05-17 06:28 levitte
879 util/mk1mf.pl (1.41.2.11), "Exp", lines: +8 -2
880 util/pl/BC-16.pl (1.2.2.2), "Exp", lines: +9 -4
881 util/pl/BC-32.pl (1.11.2.5), "Exp", lines: +8 -3
882 util/pl/Mingw32.pl (1.12.6.6), "Exp", lines: +7 -2
883 util/pl/OS2-EMX.pl (1.1.2.4), "Exp", lines: +7 -2
884 util/pl/VC-16.pl (1.3.2.2), "Exp", lines: +7 -2
885 util/pl/VC-32.pl (1.11.2.4), "Exp", lines: +7 -2
886 util/pl/VC-CE.pl (1.1.2.6), "Exp", lines: +7 -2
887 util/pl/linux.pl (1.3.6.1), "Exp", lines: +7 -2
888 util/pl/ultrix.pl (1.2.8.2), "Exp", lines: +7 -2
889 util/pl/unix.pl (1.2.8.1), "Exp", lines: +7 -2
891 Generate SHA1 files on Windows and other platforms supported by
892 mk1mf.pl, when building in FIPS mode.
896 2004-05-17 06:30 levitte
899 apps/apps.h (1.44.2.14), "Exp", lines: +3 -0
900 apps/openssl.c (1.48.2.10), "Exp", lines: +9 -5
902 Make sure the applications know when we are running in FIPS mode.
903 We can't use the variable in libcrypto, since it's supposedly
906 Note: currently only supported in MONOLITH mode.
908 2004-05-17 06:31 levitte
911 apps/enc.c (1.35.2.9), "Exp", lines: +10 -1
913 When in FIPS mode, use SHA1 to digest the key, rather than MD5, as
914 MD5 isn't a FIPS-approved algorithm.
916 Note: this means the user needs to keep track of this, and
917 we need to add support for that...
919 2004-05-17 06:39 levitte
922 apps/enc.c (1.35.2.10), "Exp", lines: +14 -0
924 Make it possible for the user to choose the digest used to create
927 2004-05-17 06:40 levitte
930 apps/enc.c (1.35.2.11), "Exp", lines: +4 -4
932 Rewrite the usage to avoid confusion.
934 2004-05-17 06:47 levitte
937 apps/enc.c (1.35.2.12), "Exp", lines: +1 -1
944 Makefile.org (1.154.2.81), "Exp", lines: +2 -7
946 Make make tags make tags.
951 apps/Makefile (1.1.4.3), "Exp", lines: +3 -3
952 apps/prime.c (1.1.2.1), "Exp", lines: +115 -0
953 apps/progs.h (1.26.2.3), "Exp", lines: +2 -0
955 Add primality tester.
957 2004-06-21 20:05 levitte
960 Makefile.org (1.154.2.82), "Exp", lines: +3 -1
962 Standard sh doesn't tolerate ! as part of the conditional command.
966 2004-06-24 14:12 steve
969 apps/prime.c (1.1.2.2), "Exp", lines: +3 -0
971 Include <string.h> to get definition of strcmp.
973 2004-06-24 14:31 steve
976 crypto/evp/evp_lib.c (1.6.8.5), "Exp", lines: +2 -2
978 Return an error if an attempt is made to encode or decode cipher
979 ASN1 parameters and the cipher doesn't support it.
981 2004-07-04 18:36 steve
984 crypto/asn1/p5_pbev2.c (1.20.2.2), "Exp", lines: +2 -1
988 2004-07-21 19:41 steve
991 crypto/pem/pem_all.c (1.20.2.1), "Exp", lines: +119 -0
993 When in FIPS mode write private keys in PKCS#8 and PBES2 format to
994 avoid use of prohibited MD5 algorithm.
999 fips/rand/fingerprint.sha1 (1.1.2.7), "Exp", lines: +1 -1
1000 fips/rand/fips_rand.c (1.1.2.7), "Exp", lines: +22 -7
1001 fips/rand/fips_randtest.c (1.1.2.5), "Exp", lines: +2 -2
1005 2004-07-24 15:40 appro
1008 ssl/ssl_cert.c (1.48.2.9), "Exp", lines: +5 -2
1010 Add casts where casts due. It's "safe" to cast, because "wrong"
1011 casts will either be optimized away or never performed. The trouble
1012 is that compiler first parses code, then optimizes, not both at
1015 2004-07-27 16:09 levitte
1018 makevms.com (1.35.2.5), "Exp", lines: +1 -1
1022 2004-08-02 16:15 levitte
1025 crypto/cryptlib.c (1.32.2.13), "Exp", lines: +4 -4
1027 Let's lock a write lock when changing values, shall we?
1029 Thanks to Dr Stephen Henson <shenson@drh-consultancy.co.uk>
1030 for making me aware of this error.
1032 2004-08-09 14:13 levitte
1035 makevms.com (1.35.2.8), "Exp", lines: +1 -1
1037 In the fips directory, we use FIPS-LIB.COM, not CRYPTO-LIB.COM...
1039 2004-08-11 22:34 levitte
1042 apps/makeapps.com (1.18.2.6), "Exp", lines: +2 -2
1044 Another missing module in the VMS build files. I believe this is
1047 2004-09-10 22:27 steve
1050 crypto/x509/x509_req.c (1.13.2.2), "Exp", lines: +1 -1
1054 2004-09-11 11:45 levitte
1057 test/testenc.com (1.6.8.2), "Exp", lines: +1 -1
1059 Makefile.ssl changed name to Makefile...
1061 2004-09-14 00:30 steve
1064 crypto/asn1/a_strex.c (1.8.2.6), "Exp", lines: +7 -2
1066 ASN1_STRING_to_UTF8() assumed that the MBSTRING_* flags were of the
1067 form MBSTRING_FLAG|nbyte where "nbyte" is the number of bytes per
1070 Unfortunately this isn't so and we can't change the
1071 #defines because this would break binary compatibility, so for
1072 0.9.7X only translate between the two.
1074 2004-09-14 00:39 steve
1077 crypto/x509/x509_req.c (1.13.2.3), "Exp", lines: +1 -1
1079 Oops, forgot to reorder extension request nids.
1081 2004-10-14 07:51 levitte
1084 VMS/mkshared.com (1.3.2.1), "Exp", lines: +8 -0
1086 We need to check for OPENSSL_FIPS when building shared libraries,
1087 so we get correct transfer vectors for those functions when
1090 2004-10-26 13:47 steve
1093 util/mkfiles.pl (1.12.2.2), "Exp", lines: +1 -0
1095 Add fips/dh directory to mkfiles.pl
1097 2004-11-11 02:18 steve
1100 crypto/engine/vendor_defns/sureware.h (1.2.2.1), "Exp", lines: +1 -1
1102 The use of "exp" as a variable name in a prototype causes a
1103 conflict with FC2 headers.
1105 2004-11-13 14:52 steve
1108 crypto/evp/e_old.c (1.1.2.2), "Exp", lines: +1 -1
1112 Use OPENSSL_NO_CAST, not OPENSSL_NO_CAST5 in e_old.c
1114 2004-11-27 13:55 steve
1117 apps/prime.c (1.1.2.3), "Exp", lines: +28 -17
1119 Fix leaks and give an error if no argument specified in prime.c
1121 2004-11-27 14:02 steve
1124 apps/prime.c (1.1.2.4), "Exp", lines: +7 -8
1126 Remove unnecessary check and call BIO_free_all() on bio_out to
1127 avoid a leak on VMS.
1129 2004-12-09 19:00 appro
1132 apps/openssl.c (1.48.2.11), "Exp", lines: +1 -1
1134 Eliminate dependency on UNICODE macro.
1136 2004-12-20 14:18 appro
1139 util/mklink.pl (1.6.2.2), "Exp", lines: +1 -0
1141 When re-linking files, really relink them. In other words, emulate
1144 2004-12-28 00:48 appro
1147 Configure (1.314.2.103), "Exp", lines: +1 -2
1148 Makefile.org (1.154.2.92), "Exp", lines: +2 -2
1150 Cosmetic mingw update. PR: 924
1152 2005-01-09 18:58 appro
1155 crypto/evp/c_alld.c (1.4.2.1), "Exp", lines: +1 -1
1156 crypto/evp/m_sha.c (1.8.2.1), "Exp", lines: +1 -1
1157 crypto/sha/shatest.c (1.11.2.2), "Exp", lines: +2 -2
1159 Allow for ./config no-sha0. PR: 993
1161 2005-01-11 07:53 levitte
1164 apps/apps.c (1.49.2.31), "Exp", lines: +0 -16
1166 Remove VMS_strcasecmp() from apps.c, it's not used any more. And
1167 besides, the implementation is bogus.
1169 2005-01-31 02:40 steve
1172 crypto/asn1/a_verify.c (1.12.2.3), "Exp", lines: +7 -6
1176 2005-01-31 02:46 steve
1179 test/testss (1.7.2.1), "Exp", lines: +1 -1
1181 Use SHA1 for test certificates so FIPS SSL/TLS tests work.
1183 2005-02-03 12:09 appro
1186 Configure (1.314.2.105), "Exp", lines: +2 -2
1187 Makefile.org (1.154.2.94), "Exp", lines: +16 -6
1188 TABLE (1.99.2.44), "Exp", lines: +2 -2
1190 Final HP-UX specific touches to "cope with run-time linker on
1191 multi-ABI platforms."
1193 2005-03-12 10:28 appro
1196 Makefile.org (1.154.2.95), "Exp", lines: +9 -2
1197 apps/Makefile (1.1.4.13), "Exp", lines: +0 -1
1198 test/Makefile (1.1.4.9), "Exp", lines: +0 -1
1200 Move copying of .dll to apps/ and test/ to more appropriate place.
1202 2005-03-12 13:15 appro
1205 apps/Makefile (1.1.4.14), "Exp", lines: +4 -2
1206 test/Makefile (1.1.4.10), "Exp", lines: +42 -194
1208 Fold rules in test/Makefile and provide hooks for updated FIPS
1211 2005-03-15 10:46 appro
1214 Makefile.org (1.154.2.96), "Exp", lines: +1 -1
1215 crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3
1216 fips/Makefile (1.1.4.8), "Exp", lines: +4 -1
1218 Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this
1219 in crypto/Makefile and make Makefile.org and fips/Makefile more
1222 2005-03-26 20:32 appro
1225 crypto/perlasm/x86nasm.pl (1.2.8.8), "Exp", lines: +6 -1
1227 Resolve "operation size not specified" in NASM modules.
1229 2005-04-03 21:16 appro
1232 Configure (1.314.2.109), "Exp", lines: +10 -0
1233 TABLE (1.99.2.48), "Exp", lines: +50 -0
1234 config (1.95.2.33), "Exp", lines: +9 -2
1235 crypto/bn/Makefile (1.1.4.4), "Exp", lines: +1 -0
1236 crypto/rc4/Makefile (1.1.4.6), "Exp", lines: +1 -1
1238 Extend Solaris x86 support to amd64. Note that if both gcc and Sun
1239 C are installed, it defaults to gcc, because it beats Sun C on
1240 every benchmark. Also note that gcc shared build was verified to
1243 2005-04-14 00:47 appro
1246 Makefile.org (1.154.2.98), "Exp", lines: +1 -1
1248 Move cygcrypto.dll above cygwin.dll.
1250 2005-04-15 10:00 nils
1253 doc/HOWTO/keys.txt (1.1.2.2), "Exp", lines: +3 -3
1254 doc/crypto/EVP_EncryptInit.pod (1.10.2.5), "Exp", lines: +3 -3
1256 EVP_CIPHER_CTX_init is a void function + fix typo
1260 2005-04-17 06:35 steve
1263 util/pl/VC-32.pl (1.11.2.6), "Exp", lines: +1 -1
1265 Include user32.lib to import MessageBoxIndirect
1267 2005-04-19 16:21 appro
1270 Configure (1.314.2.117), "Exp", lines: +24 -21
1271 Makefile.org (1.154.2.100), "Exp", lines: +1 -11
1272 TABLE (1.99.2.52), "Exp", lines: +20 -20
1273 apps/Makefile (1.1.4.15), "Exp", lines: +1 -1
1274 test/Makefile (1.1.4.12), "Exp", lines: +1 -1
1276 Enable shared link on HP-UX.
1278 2005-04-20 10:27 steve
1281 Configure (1.314.2.118), "Exp", lines: +1 -1
1282 util/mk1mf.pl (1.41.2.12), "Exp", lines: +2 -0
1284 Ignore zlib related options in mk1mf.pl
1286 2005-04-20 18:42 steve
1289 Configure (1.314.2.119), "Exp", lines: +2 -2
1291 Don't use kerberos library locations on windows.
1293 2005-04-22 07:17 steve
1296 CHANGES (1.977.2.156), "Exp", lines: +5 -0
1297 crypto/bn/bn.h (1.66.2.4), "Exp", lines: +2 -0
1298 crypto/bn/bn_mont.c (1.30.2.3), "Exp", lines: +20 -0
1299 crypto/dh/dh_key.c (1.16.2.4), "Exp", lines: +14 -10
1300 crypto/dsa/dsa_ossl.c (1.12.2.7), "Exp", lines: +12 -9
1301 crypto/rsa/rsa_eay.c (1.28.2.10), "Exp", lines: +16 -90
1302 fips/fipshashes.c (1.1.2.5), "Exp", lines: +3 -3
1303 fips/dh/fips_dh_key.c (1.1.2.4), "Exp", lines: +13 -10
1304 fips/dsa/fips_dsa_ossl.c (1.1.2.8), "Exp", lines: +12 -9
1305 fips/rsa/fips_rsa_eay.c (1.1.4.5), "Exp", lines: +17 -90
1307 New function BN_MONT_CTX_set_locked, to set montgomery parameters
1308 in a threadsafe manner.
1310 Modify or add calls to use it in rsa, dsa and dh
1313 2005-04-23 06:46 nils
1316 crypto/dsa/dsa_ossl.c (1.12.2.8), "Exp", lines: +1 -1
1317 crypto/rsa/rsa_eay.c (1.28.2.11), "Exp", lines: +4 -4