[openssl.git] / ChangeLog.0_9_7-stable_not-in-head

This file, together with ChangeLog.0_9_7-stable_not-in-head_FIPS,
provides a collection of those CVS change log entries for the
0.9.7 branch (OpenSSL_0_9_7-stable) that do not appear similarly in
0.9.8-dev (CVS head).
    
ChangeLog.0_9_7-stable_not-in-head_FIPS  -  "FIPS" related changes
ChangeLog.0_9_7-stable_not-in-head       -  everything else

Some obvious false positives have been eliminated: e.g., we do not
care about a simple "make update"; and we don't care about changes
identified to the 0.9.7 branch that were explicitly identified as
backports from head.
    
Eliminating all other entries (and finally this file and its
compantion), either as false positives or as things that should go
into 0.9.8, remains to be done.  Any additional changes to 0.9.7 that
are not immediately put into 0.9.8, but belong there as well, should
be added to the end of this file.


2002-02-14 03:43  levitte

        Changed:
                crypto/des/str2key.c (1.12.2.1), "Exp", lines: +12 -0

        Because making the key strong by xoring the last byte with 0xF0
        generates different keys than previous versions of OpenSSL and
        libdes, let's make Assar's change experimental for now.

2002-02-14 14:42  levitte

        Changed:
                crypto/err/err.c (1.51.2.1), "Exp", lines: +1 -1

        For some reason, getting the topmost error was done the same way as
        getting the bottommost one.  I hope I understood correctly how this
        should be done.  It seems to work when running evp_test in an
        environment where it can't find openssl.cnf.

2002-02-14 14:51  levitte

        Changed:
                crypto/des/read2pwd.c (1.6.2.1), "Exp", lines: +1 -0

        Make sure memset() is defined by including string.h Notified by
        Oscar Jacobsson <oscar@jacobsson.org>

2002-02-14 17:23  levitte

        Changed:
                crypto/ui/ui_openssl.c (1.11.2.1), "Exp", lines: +7 -1
                crypto/rsa/rsa.h (1.36.2.1), "Exp", lines: +6 -6
                crypto/rand/rand_egd.c (1.16.2.1), "Exp", lines: +5 -1
                crypto/des/read_pwd.c (1.26.2.1), "Exp", lines: +7 -1
                crypto/bio/bss_log.c (1.30.2.1), "Exp", lines: +1 -1
                crypto/bio/bss_bio.c (1.31.2.1), "Exp", lines: +5 -0
                crypto/tmdiff.c (1.9.2.1), "Exp", lines: +17 -2
                apps/speed.c (1.83.2.1), "Exp", lines: +20 -4
                apps/ca.c (1.102.2.1), "Exp", lines: +1 -1
                apps/s_time.c (1.23.2.1), "Exp", lines: +20 -2
                Configure (1.314.2.3), "Exp", lines: +3 -0
                e_os.h (1.56.2.1), "Exp", lines: +9 -1

        Add the configuration target VxWorks.

2002-03-01 16:39  ben

        Changed:
                Configure (1.314.2.6), "Exp", lines: +1 -0

        OpenBSD variant.

2002-03-22 03:36  levitte

        Changed:
                apps/version.c (1.13.2.1), "Exp", lines: +2 -2
                apps/speed.c (1.83.2.6), "Exp", lines: +6 -6
                apps/passwd.c (1.24.2.2), "Exp", lines: +2 -2

        Use the more modern DES API in the openssl subcommands.

2002-03-22 11:29  levitte

        Changed:
                crypto/des/des_old.h (1.9.2.4), "Exp", lines: +35 -23

        Key schedules are given as arguments a bit differently in 0.9.6 and
        earlier.  Also, a few 0.9.6 functions were missing their mappings.

2002-03-22 11:46  levitte

        Changed:
                crypto/des/destest.c (1.30.2.2), "Exp", lines: +37 -35

        Key schedules are given as arguments a bit differently in 0.9.6 and
        earlier.  Also, it was an error to define crypt() at all times.

2002-03-26 15:25  levitte

        Changed:
                CHANGES (1.977.2.15), "Exp", lines: +19 -8
                crypto/des/des.h (1.40.2.2), "Exp", lines: +6 -0

        Add the possibility to enable olde des support, not just disable
        it, for future support.  Redocument

2002-04-20 12:25  levitte

        Changed:
                util/mk1mf.pl (1.41.2.1), "Exp", lines: +4 -1

        Make sure ec is properly handled in Windows.

2002-05-08 17:13  ben

        Changed:
                crypto/conf/conf_mod.c (1.8.2.6), "Exp", lines: +1 -1

        Fix warning.

2002-05-22 09:53  levitte

        Changed:
                apps/speed.c (1.83.2.7), "Exp", lines: +4 -1

        Remove warnings about unused symbols when configured with no-rsa.

2002-05-22 09:55  levitte

        Changed:
                crypto/asn1/x_pubkey.c (1.21.2.1), "Exp", lines: +1 -1

        Remove warnings about uninitialised variables.  This has already
        been applied in the main branch.

2002-05-22 09:56  levitte

        Changed:
                crypto/engine/hw_4758_cca.c (1.1.2.4), "Exp", lines: +14 -14

        Use 0 instead of NULL when casting to function pointers, to avoid
        warnings from compilers when NULL is defined as '((void *)0)'.
        This has already been applied in the main branch.

2002-05-23 17:25  levitte

        Changed:
                VMS/tcpip_shr_decc.opt (1.1.4.1), "Exp", lines: +1 -0

        Forgot this file.

2002-05-31 16:34  ben

        Changed:
                crypto/evp/evp_test.c (1.14.2.5), "Exp", lines: +1 -1

        Fix a warning.

2002-06-05 08:45  levitte

        Changed:
                ssl/ssl-lib.com (1.11.2.3), "Exp", lines: +1 -1
                test/maketests.com (1.13.2.2), "Exp", lines: +29 -1

        Correct syntax in ssl-lib.com maketests.com was missing the TCP/IP
        options TCPIP and NONE

2002-08-13 14:19  levitte

        Changed:
                demos/engines/rsaref/Makefile (1.3.2.1), "Exp", lines: +1 -1

        Export text symbols as well (AIX experts might need to correct me
        here).

2002-08-13 14:26  levitte

        Changed:
                demos/engines/cluster_labs/Makefile (1.1.2.1), "Exp", lines: +114 -0
                demos/engines/cluster_labs/cluster_labs.h (1.1.2.1), "Exp", lines: +35 -0
                demos/engines/cluster_labs/hw_cluster_labs.c (1.1.2.1), "Exp", lines: +718 -0
                demos/engines/cluster_labs/hw_cluster_labs.ec (1.1.2.1), "Exp", lines: +8 -0
                demos/engines/cluster_labs/hw_cluster_labs_err.c (1.1.2.1), "Exp", lines: +151 -0
                demos/engines/cluster_labs/hw_cluster_labs_err.h (1.1.2.1), "Exp", lines: +95 -0
                demos/engines/ibmca/Makefile (1.1.2.1), "Exp", lines: +114 -0
                demos/engines/ibmca/hw_ibmca.c (1.1.2.1), "Exp", lines: +917 -0
                demos/engines/ibmca/hw_ibmca.ec (1.1.2.1), "Exp", lines: +8 -0
                demos/engines/ibmca/hw_ibmca_err.c (1.1.2.1), "Exp", lines: +154 -0
                demos/engines/ibmca/hw_ibmca_err.h (1.1.2.1), "Exp", lines: +98 -0
                demos/engines/ibmca/ica_openssl_api.h (1.1.2.1), "Exp", lines: +189 -0
                demos/engines/zencod/Makefile (1.1.2.1), "Exp", lines: +114 -0
                demos/engines/zencod/hw_zencod.c (1.1.2.1), "Exp", lines: +1736 -0
                demos/engines/zencod/hw_zencod.ec (1.1.2.1), "Exp", lines: +8 -0
                demos/engines/zencod/hw_zencod.h (1.1.2.1), "Exp", lines: +160 -0
                demos/engines/zencod/hw_zencod_err.c (1.1.2.1), "Exp", lines: +151 -0
                demos/engines/zencod/hw_zencod_err.h (1.1.2.1), "Exp", lines: +95 -0

        OK, I've amused myself with making sure the engines that have been
        contributed TO WORK WITH 0.9.7 can be built as dynamically loadable
        libraries.

                For now, they're not included in crypto/engine/ since 0.9.7
        is in feature freeze.  Further discussion might change that, but
        don't hold your breath.

2002-08-15 13:48  levitte

        Changed:
                crypto/crypto-lib.com (1.53.2.8), "Exp", lines: +1 -1

        I think that's the last forgotten compilation module.

2002-10-09 14:19  levitte

        Changed:
                crypto/engine/hw_cswift.c (1.17.2.5), "Exp", lines: +1 -0

        The dissapearing destroy callback reappears

2002-10-24 00:09  levitte

        Changed:
                crypto/crypto-lib.com (1.53.2.9), "Exp", lines: +1 -1

        An engine changed name.

2002-10-29 18:46  geoff

        Changed:
                doc/ssl/SSL_CTX_set_session_cache_mode.pod (1.5.2.2), "Exp", lines: +1 -0

        Correct another inconsistency in my recent commits.

2002-11-04 17:33  levitte

        Changed:
                Configure (1.314.2.38), "Exp", lines: +4 -2

        Return my normal debug targets to something not so extreme, and
        make the extreme ones special (or 'extreme', if you will :-)).

2002-11-13 12:35  levitte

        Changed:
                crypto/cryptlib.h (1.10.2.4), "Exp", lines: +0 -4
                crypto/crypto.h (1.62.2.3), "Exp", lines: +4 -0

        Make OpenSSLdie() visible (it's a must to get a proper reference in
        libeay.num).

2002-11-13 14:36  levitte

        Changed:
                crypto/pem/pem_lib.c (1.36.2.5), "Exp", lines: +1 -1

        C++ comments in C code, 'nuff said...

2002-11-13 15:30  levitte

        Changed:
                demos/engines/ibmca/hw_ibmca.c (1.1.2.2), "Exp", lines: +3 -0
                demos/engines/zencod/hw_zencod.c (1.1.2.2), "Exp", lines: +4 -1
                demos/engines/cluster_labs/hw_cluster_labs.c (1.1.2.2), "Exp", lines: +5 -2

        The loading functions should be static if we build a dynamic
        engine.

2002-12-12 18:41  levitte

        Changed:
                crypto/engine/hw_ncipher.c (1.26.2.7), "Exp", lines: +38 -2
                crypto/engine/hw_ncipher_err.c (1.1.2.2), "Exp", lines: +1 -1
                crypto/engine/hw_ncipher_err.h (1.1.2.2), "Exp", lines: +1 -1
                crypto/cryptlib.c (1.32.2.8), "Exp", lines: +2 -1
                crypto/crypto.h (1.62.2.7), "Exp", lines: +2 -1
                CHANGES (1.977.2.78), "Exp", lines: +14 -0

        Add a static lock called HWCRHK, for the case of having an
        application that wants to use the hw_ncipher engine without having
        given any callbacks for the dynamic type of locks.

2002-12-15 16:27  appro

        Changed:
                Makefile.org (1.154.2.41), "Exp", lines: +2 -1

        Another Solaris shared build clean-up. This is not actually needed
        if one uses WorkShop C. It's gcc driver that brings copy of
        libgcc.a into .so otherwise. In case you wonder what it's -Wl,-z...
        and not just -z. Problem is that gcc driver apparently omits all -z
        options but -z text. Don't ask me why. I'm not committing
        corresponding workaround into the HEAD as Makefile.shared
        reportedly needs even more work...

2002-12-16 19:17  appro

        Changed:
                crypto/bn/bn_lcl.h (1.23.2.3), "Exp", lines: +3 -0
                crypto/bn/bn_mul.c (1.28.2.4), "Exp", lines: +84 -445

        This is rollback to 0.9.6h bn_mul.c to address problem reported in
        RT#272.

2002-12-16 19:59  appro

        Changed:
                Makefile.org (1.154.2.42), "Exp", lines: +3 -1

        Some of Sun compiler drivers (well, one of those I have) collect
        all options specified with -Wl in the beginnig of the ld command
        line which kind of obsoletes the idea as it's -z defaultextract
        that will be closest to lib*.a and not -z allextract:-(

2002-12-17 15:21  levitte

        Changed:
                NEWS (1.39.2.16), "Exp", lines: +4 -1

        A few more NEWS items.

!2002-12-27 17:49  appro
!
!       Changed:
!               Configure (1.314.2.62), "Exp", lines: +1 -1
!
!       According to Tim Rice <tim@multitalents.net> assembler support in
!       SCO5 never worked anyway. Note this is not going to HEAD as we
!       intend to provide an alternative solution as soon as 0.9.7 is out.

2002-12-28 02:35  levitte

        Changed:
                Configure (1.314.2.63), "Exp", lines: +1 -1

        Hmm, the variables $x96_elf_asm and others contain a number of
        colons, so when removing one reference, if should be replaced with
        the appropriate number of colons, or chaos will follow...

        It's rather silly to believe we'd release 0.9.7a in 2002 :-).

2003-01-01 16:48  ben

        Changed:
                crypto/des/des_locl.h (1.19.2.5), "Exp", lines: +1 -1
                crypto/rc5/rc5_locl.h (1.3.2.4), "Exp", lines: +1 -1

        Fix warnings, use correct -Ds.

? 2003-04-04 16:21  levitte

        Changed:
                util/mkdef.pl (1.67.2.5), "Exp", lines: +10 -5
                util/mkerr.pl (1.18.2.3), "Exp", lines: +6 -6

        Transfer the changes to detect multiline comments and the GCC
        extension __attribute__.

2003-04-08 13:54  levitte

        Changed:
                test/Makefile.ssl (1.84.2.25), "Exp", lines: +29 -1
                apps/Makefile.ssl (1.100.2.22), "Exp", lines: +1 -0
                Makefile.org (1.154.2.61), "Exp", lines: +4 -5

        Set LD_LIBRARY_PATH when linking, since OpenUnix' ld uses it to
        create a library search path.

                Correct typos.

2003-04-09 07:25  levitte

        Changed:
                test/Makefile.ssl (1.84.2.26), "Exp", lines: +1 -1

        Typo

2003-04-09 08:50  levitte

        Changed:
                apps/Makefile.ssl (1.100.2.23), "Exp", lines: +1 -0

        Dont forget req.

2003-07-03 23:43  levitte

        Changed:
                Makefile.org (1.154.2.65), "Exp", lines: +2 -2

        Add a slash so grep doesn't return both ./crypto/bio/bss_mem.o and
        ./crypto/mem.o when we're looking for mem.o.

2003-07-27 15:46  ben

        Changed:
                crypto/aes/aes.h (1.1.2.5), "Exp", lines: +3 -0
                crypto/aes/aes_cfb.c (1.1.2.4), "Exp", lines: +57 -0

        Add untested CFB-r mode. Will be tested soon.

2003-07-28 17:07  ben

        Changed:
                Makefile.org (1.154.2.69), "Exp", lines: +5 -1
                crypto/aes/aes.h (1.1.2.6), "Exp", lines: +3 -0
                crypto/aes/aes_cfb.c (1.1.2.5), "Exp", lines: +19 -0
                crypto/dsa/Makefile.ssl (1.49.2.6), "Exp", lines: +3 -2
                crypto/err/Makefile.ssl (1.48.2.4), "Exp", lines: +17 -16
                crypto/evp/e_aes.c (1.6.2.5), "Exp", lines: +8 -0
                crypto/evp/e_des.c (1.5.2.2), "Exp", lines: +1 -1
                crypto/evp/e_des3.c (1.8.2.3), "Exp", lines: +2 -2
                crypto/evp/evp.h (1.86.2.11), "Exp", lines: +28 -11
                crypto/evp/evp_locl.h (1.7.2.3), "Exp", lines: +2 -2
                crypto/objects/obj_dat.h (1.49.2.13), "Exp", lines: +10 -5
                crypto/objects/obj_mac.h (1.19.2.13), "Exp", lines: +5 -0
                crypto/objects/obj_mac.num (1.15.2.9), "Exp", lines: +1 -0
                crypto/objects/objects.txt (1.20.2.14), "Exp", lines: +4 -0
                fips/Makefile.ssl (1.1.2.3), "Exp", lines: +7 -0
                fips/aes/Makefile.ssl (1.1.2.2), "Exp", lines: +23 -1
                fips/aes/fips_aesavs.c (1.1.2.3), "Exp", lines: +9 -1
                test/Makefile.ssl (1.84.2.30), "Exp", lines: +101 -43

        Add support for partial CFB modes, make tests work, update
        dependencies.

2003-07-29 12:56  ben

        Changed:
                crypto/aes/aes_cfb.c (1.1.2.6), "Exp", lines: +9 -6
                crypto/evp/c_allc.c (1.8.2.3), "Exp", lines: +1 -0
                crypto/evp/evp_test.c (1.14.2.11), "Exp", lines: +17 -8
                crypto/evp/evptests.txt (1.9.2.2), "Exp", lines: +48 -1

        Working CFB1 and test vectors.

2003-07-29 15:24  ben

        Changed:
                crypto/evp/e_aes.c (1.6.2.6), "Exp", lines: +14 -0
                crypto/objects/obj_dat.h (1.49.2.14), "Exp", lines: +15 -5
                crypto/objects/obj_mac.h (1.19.2.14), "Exp", lines: +10 -0
                crypto/objects/obj_mac.num (1.15.2.10), "Exp", lines: +2 -0
                crypto/objects/objects.txt (1.20.2.15), "Exp", lines: +2 -0
                fips/aes/Makefile.ssl (1.1.2.3), "Exp", lines: +1 -1
                fips/aes/fips_aesavs.c (1.1.2.4), "Exp", lines: +34 -19

        The rest of the keysizes for CFB1, working AES AVS test for CFB1.

2003-07-29 19:05  ben

        Changed:
                crypto/aes/aes.h (1.1.2.7), "Exp", lines: +3 -0
                crypto/aes/aes_cfb.c (1.1.2.7), "Exp", lines: +14 -0
                crypto/evp/c_allc.c (1.8.2.4), "Exp", lines: +1 -0
                crypto/evp/e_aes.c (1.6.2.7), "Exp", lines: +4 -9
                crypto/evp/evptests.txt (1.9.2.3), "Exp", lines: +48 -0
                crypto/objects/obj_dat.h (1.49.2.15), "Exp", lines: +20 -5
                crypto/objects/obj_mac.h (1.19.2.15), "Exp", lines: +15 -0
                crypto/objects/obj_mac.num (1.15.2.11), "Exp", lines: +3 -0
                crypto/objects/objects.txt (1.20.2.16), "Exp", lines: +3 -0
                fips/aes/fips_aesavs.c (1.1.2.7), "Exp", lines: +11 -0

        AES CFB8.

2003-07-30 20:30  ben

        Changed:
                Makefile.org (1.154.2.70), "Exp", lines: +16 -5
                crypto/des/cfb_enc.c (1.7.2.1), "Exp", lines: +2 -1
                crypto/des/des_enc.c (1.11.2.2), "Exp", lines: +4 -0
                crypto/evp/e_aes.c (1.6.2.8), "Exp", lines: +7 -14
                crypto/evp/e_des.c (1.5.2.3), "Exp", lines: +37 -1
                crypto/evp/evp.h (1.86.2.12), "Exp", lines: +6 -0
                crypto/evp/evp_locl.h (1.7.2.4), "Exp", lines: +9 -0
                crypto/objects/obj_dat.h (1.49.2.16), "Exp", lines: +48 -23
                crypto/objects/obj_mac.h (1.19.2.16), "Exp", lines: +31 -6
                crypto/objects/obj_mac.num (1.15.2.12), "Exp", lines: +5 -0
                crypto/objects/objects.txt (1.20.2.17), "Exp", lines: +12 -6
                fips/Makefile.ssl (1.1.2.4), "Exp", lines: +8 -1
                fips/fips_make_sha1 (1.1.2.3), "Exp", lines: +3 -0
                fips/aes/Makefile.ssl (1.1.2.4), "Exp", lines: +1 -1
                fips/des/.cvsignore (1.1.2.1), "Exp", lines: +3 -0
                fips/des/Makefile.ssl (1.1.2.1), "Exp", lines: +96 -0
                fips/des/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
                fips/des/fips_des_enc.c (1.1.2.1), "Exp", lines: +288 -0
                fips/des/fips_des_locl.h (1.1.2.1), "Exp", lines: +428 -0
                fips/des/fips_desmovs.c (1.1.2.1), "Exp", lines: +659 -0

        Whoops, forgot FIPS DES, also add EVPs for DES CFB1 and 8.

2003-07-31 23:30  levitte

        Changed:
                Makefile.org (1.154.2.71), "Exp", lines: +2 -0

        If FDIRS is to be treated like SDIRS, let's not forget to
        initialize it in Makefile.org.

2003-08-01 12:25  ben

        Changed:
                crypto/des/cfb_enc.c (1.7.2.2), "Exp", lines: +45 -36
                crypto/evp/c_allc.c (1.8.2.5), "Exp", lines: +2 -0
                crypto/evp/e_des.c (1.5.2.4), "Exp", lines: +8 -3
                crypto/evp/evptests.txt (1.9.2.4), "Exp", lines: +6 -0

        Fix DES CFB-r.

2003-08-01 12:31  ben

        Changed:
                crypto/evp/evptests.txt (1.9.2.5), "Exp", lines: +4 -0

        DES CFB8 test.

2003-08-01 19:06  steve

        Changed:
                crypto/evp/evp_lib.c (1.6.8.2), "Exp", lines: +24 -0
                crypto/objects/obj_dat.h (1.49.2.17), "Exp", lines: +15 -46
                crypto/objects/obj_mac.h (1.19.2.17), "Exp", lines: +1 -24
                crypto/objects/obj_mac.num (1.15.2.13), "Exp", lines: +1 -4
                crypto/objects/objects.txt (1.20.2.18), "Exp", lines: +8 -12

        Make the EFB NIDs have empty OIDs aliased to the real EFB OID.

2003-08-11 11:56  levitte

        Changed:
                apps/Makefile.ssl (1.100.2.24), "Exp", lines: +1 -1

        Oops, removed a little too much.

2003-08-11 13:46  levitte

        Changed:
                test/Makefile.ssl (1.84.2.33), "Exp", lines: +28 -28

        Don't fiddle with LD_LIBRARY_PATH when building non-static.

2003-08-14 08:54  levitte

        Changed:
                apps/Makefile.ssl (1.100.2.25), "Exp", lines: +1 -1
                test/Makefile.ssl (1.84.2.34), "Exp", lines: +28 -28

        Undo the change that left LD_LIBRARY_PATH unchanged.  The errors I
        saw weren't due to that, but to a change on the SCO machines I used
        for testing, where my $PATH was suddenly incorrect.

2003-09-27 20:31  levitte

        Changed:
                apps/pkcs8.c (1.22.2.8), "Exp", lines: +5 -6

        Remove extra argument to BIO_printf().  PR: 685

2003-09-29 19:10  steve

        Changed:
                crypto/bio/bss_file.c (1.14.2.4), "Exp", lines: +2 -2

        Fix to make it compile under Win32.

2003-11-19 06:18  geoff

        Changed:
                crypto/x509/x509.h (1.116.2.4), "Exp", lines: +0 -4

        Remove duplicate prototypes have already been (correctly) added to
        rsa.h, as this is already included by x509.h anyway.

2004-01-21 10:58  appro

        Changed:
                Configure (1.314.2.89), "Exp", lines: +1 -0
                config (1.95.2.27), "Exp", lines: +7 -6
                crypto/bn/Makefile.ssl (1.65.2.7), "Exp", lines: +3 -0

        Proper support for HP-UX64 gcc build.  PR: 772

2004-01-29 10:41  levitte

        Changed:
                crypto/bn/bn_lcl.h (1.23.2.6), "Exp", lines: +8 -9

        Have the declarations match the definitions.

2004-03-16 06:50  steve

        Changed:
                apps/x509.c (1.67.2.14), "Exp", lines: +0 -1
                ssl/kssl.c (1.20.2.12), "Exp", lines: +2 -2

        Avoid warnings.

2004-03-17 05:01  mark

        Changed:
                CHANGES (1.977.2.128), "Exp", lines: +9 -1
                FAQ (1.61.2.30), "Exp", lines: +1 -1
                LICENSE (1.7.2.3), "Exp", lines: +1 -1
                NEWS (1.39.2.21), "Exp", lines: +8 -0
                README (1.39.2.24), "Exp", lines: +2 -2
                STATUS (1.211.2.41), "Exp", lines: +4 -1
                openssl.spec (1.6.2.6), "Exp", lines: +1 -1
                crypto/opensslv.h (1.40.2.21), "Exp", lines: +2 -2
                ssl/s3_pkt.c (1.46.2.6), "Exp", lines: +8 -0
                ssl/s3_srvr.c (1.85.2.20), "Exp", lines: +16 -0

        Fix null-pointer assignment in do_change_cipher_spec() revealed by
        using the Codenomicon TLS Test Tool (CAN-2004-0079) Fix flaw in
        SSL/TLS handshaking when using Kerberos ciphersuites
        (CAN-2004-0112) Ready for 0.9.7d build

                Submitted by: Steven Henson Reviewed by: Joe Orton Approved
        by: Mark Cox

2004-03-25 01:57  steve

        Changed:
                crypto/pkcs7/pk7_doit.c (1.50.2.9), "Exp", lines: +9 -4
                crypto/pkcs7/pk7_doit.c (1.50.2.4.2.2), "Exp", lines: +9 -4

        Make S/MIME encrypt work again.

2004-04-02 14:39  levitte

        Changed:
                crypto/bn/Makefile.ssl (1.65.2.8), "Exp", lines: +1 -1

        Typo.  "pa-rics2W" corrected to "pa-risc2W".  PR: 868

2004-05-12 12:09  levitte

        Changed:
                apps/apps.h (1.44.2.13), "Exp", lines: +0 -6
                crypto/o_str.c (1.5.2.1), "Exp", lines: +4 -3
                crypto/o_str.h (1.2.6.1), "Exp", lines: +0 -0

        The functions OPENSSL_strcasen?cmp() were forgotten when merging
        the FIPS branch into this.  It's needed at least for certain
        OpenVMS versions, and should really be used in a more general way.

2004-05-12 12:17  levitte

        Changed:
                crypto/Makefile (1.1.4.2), "Exp", lines: +3 -3

        Forgot to update the Makefile with the o_str stuff...

2004-05-12 16:11  ben

        Changed:
                crypto/rand/rand.h (1.26.2.8), "Exp", lines: +2 -0
                crypto/rand/rand_err.c (1.6.2.4), "Exp", lines: +2 -0
                fips/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
                fips/fips.c (1.1.2.4), "Exp", lines: +5 -1
                fips/rand/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
                fips/rand/fips_rand.c (1.1.2.5), "Exp", lines: +29 -0

        Blow up in people's faces if they don't reseed.

2004-05-12 19:53  steve

        Changed:
                apps/x509.c (1.67.2.16), "Exp", lines: +0 -7

        Fix memory leak.

2004-05-14 19:54  levitte

        Changed:
                util/libeay.num (1.173.2.20), "Exp", lines: +43 -54

        All EVP_*_cfb functions have changed names to EVP_*_cfb64 or
        EVP_*_cfb128.

2004-05-15 18:39  ben

        Changed:
                ssl/s23_clnt.c (1.20.2.6), "Exp", lines: +5 -2
                ssl/s2_clnt.c (1.37.2.11), "Exp", lines: +5 -2
                ssl/s2_srvr.c (1.36.2.8), "Exp", lines: +6 -3
                ssl/s3_clnt.c (1.53.2.17), "Exp", lines: +2 -1
                ssl/s3_srvr.c (1.85.2.22), "Exp", lines: +4 -2
                ssl/ssl_sess.c (1.40.2.8), "Exp", lines: +2 -1

        Check error returns.

2004-05-17 06:39  levitte

        Changed:
                apps/enc.c (1.35.2.10), "Exp", lines: +14 -0

        Make it possible for the user to choose the digest used to create
        the key.

2004-05-17 06:40  levitte

        Changed:
                apps/enc.c (1.35.2.11), "Exp", lines: +4 -4

        Rewrite the usage to avoid confusion.

2004-05-17 06:47  levitte

        Changed:
                apps/enc.c (1.35.2.12), "Exp", lines: +1 -1

        Typo corretced.

2004-06-19 15:32  ben

        Changed:
                Makefile.org (1.154.2.81), "Exp", lines: +2 -7

        Make make tags make tags.

2004-06-19 15:54  ben

        Changed:
                apps/Makefile (1.1.4.3), "Exp", lines: +3 -3
                apps/prime.c (1.1.2.1), "Exp", lines: +115 -0
                apps/progs.h (1.26.2.3), "Exp", lines: +2 -0

        Add primality tester.

2004-06-21 20:05  levitte

        Changed:
                Makefile.org (1.154.2.82), "Exp", lines: +3 -1

        Standard sh doesn't tolerate ! as part of the conditional command.

                PR: 900

2004-06-24 14:12  steve

        Changed:
                apps/prime.c (1.1.2.2), "Exp", lines: +3 -0

        Include <string.h> to get definition of strcmp.

2004-06-24 14:31  steve

        Changed:
                crypto/evp/evp_lib.c (1.6.8.5), "Exp", lines: +2 -2

        Return an error if an attempt is made to encode or decode cipher
        ASN1 parameters and the cipher doesn't support it.

2004-07-04 18:36  steve

        Changed:
                crypto/asn1/p5_pbev2.c (1.20.2.2), "Exp", lines: +2 -1

        Fix memory leak.

2004-07-24 15:40  appro

        Changed:
                ssl/ssl_cert.c (1.48.2.9), "Exp", lines: +5 -2

        Add casts where casts due. It's "safe" to cast, because "wrong"
        casts will either be optimized away or never performed. The trouble
        is that compiler first parses code, then optimizes, not both at
        once...

2004-07-27 16:09  levitte

        Changed:
                makevms.com (1.35.2.5), "Exp", lines: +1 -1

        Typo

2004-08-02 16:15  levitte

        Changed:
                crypto/cryptlib.c (1.32.2.13), "Exp", lines: +4 -4

        Let's lock a write lock when changing values, shall we?

                Thanks to Dr Stephen Henson <shenson@drh-consultancy.co.uk>
        for making me aware of this error.

2004-08-11 22:34  levitte

        Changed:
                apps/makeapps.com (1.18.2.6), "Exp", lines: +2 -2

        Another missing module in the VMS build files.  I believe this is
        the last, though...

2004-09-10 22:27  steve

        Changed:
                crypto/x509/x509_req.c (1.13.2.2), "Exp", lines: +1 -1

        Stop warning.

2004-09-11 11:45  levitte

        Changed:
                test/testenc.com (1.6.8.2), "Exp", lines: +1 -1

        Makefile.ssl changed name to Makefile...

2004-09-14 00:39  steve

        Changed:
                crypto/x509/x509_req.c (1.13.2.3), "Exp", lines: +1 -1

        Oops, forgot to reorder extension request nids.

2004-11-11 02:18  steve

        Changed:
                crypto/engine/vendor_defns/sureware.h (1.2.2.1), "Exp", lines: +1 -1

        The use of "exp" as a variable name in a prototype causes a
        conflict with FC2 headers.

2004-11-27 13:55  steve

        Changed:
                apps/prime.c (1.1.2.3), "Exp", lines: +28 -17

        Fix leaks and give an error if no argument specified in prime.c

2004-11-27 14:02  steve

        Changed:
                apps/prime.c (1.1.2.4), "Exp", lines: +7 -8

        Remove unnecessary check and call BIO_free_all() on bio_out to
        avoid a leak on VMS.

2004-12-09 19:00  appro

        Changed:
                apps/openssl.c (1.48.2.11), "Exp", lines: +1 -1

        Eliminate dependency on UNICODE macro.

2004-12-20 14:18  appro

        Changed:
                util/mklink.pl (1.6.2.2), "Exp", lines: +1 -0

        When re-linking files, really relink them. In other words, emulate
        ln -f.

2004-12-28 00:48  appro

        Changed:
                Configure (1.314.2.103), "Exp", lines: +1 -2
                Makefile.org (1.154.2.92), "Exp", lines: +2 -2

        Cosmetic mingw update.  PR: 924

2005-01-09 18:58  appro

        Changed:
                crypto/evp/c_alld.c (1.4.2.1), "Exp", lines: +1 -1
                crypto/evp/m_sha.c (1.8.2.1), "Exp", lines: +1 -1
                crypto/sha/shatest.c (1.11.2.2), "Exp", lines: +2 -2

        Allow for ./config no-sha0.  PR: 993

2005-01-11 07:53  levitte

        Changed:
                apps/apps.c (1.49.2.31), "Exp", lines: +0 -16

        Remove VMS_strcasecmp() from apps.c, it's not used any more.  And
        besides, the implementation is bogus.

2005-01-31 02:40  steve

        Changed:
                crypto/asn1/a_verify.c (1.12.2.3), "Exp", lines: +7 -6

        Avoid memory leak.

2005-01-31 02:46  steve

        Changed:
                test/testss (1.7.2.1), "Exp", lines: +1 -1

        Use SHA1 for test certificates so FIPS SSL/TLS tests work.

2005-02-03 12:09  appro

        Changed:
                Configure (1.314.2.105), "Exp", lines: +2 -2
                Makefile.org (1.154.2.94), "Exp", lines: +16 -6
                TABLE (1.99.2.44), "Exp", lines: +2 -2

        Final HP-UX specific touches to "cope with run-time linker on
        multi-ABI platforms."

2005-03-12 10:28  appro

        Changed:
                Makefile.org (1.154.2.95), "Exp", lines: +9 -2
                apps/Makefile (1.1.4.13), "Exp", lines: +0 -1
                test/Makefile (1.1.4.9), "Exp", lines: +0 -1

        Move copying of .dll to apps/ and test/ to more appropriate place.

2005-03-12 13:15  appro

        Changed:
                apps/Makefile (1.1.4.14), "Exp", lines: +4 -2
                test/Makefile (1.1.4.10), "Exp", lines: +42 -194

        Fold rules in test/Makefile and provide hooks for updated FIPS
        build procedures.

2005-03-15 10:46  appro

        Changed:
                Makefile.org (1.154.2.96), "Exp", lines: +1 -1
                crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3
                fips/Makefile (1.1.4.8), "Exp", lines: +4 -1

        Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this
        in crypto/Makefile and make Makefile.org and fips/Makefile more
        discreet.

2005-03-26 20:32  appro

        Changed:
                crypto/perlasm/x86nasm.pl (1.2.8.8), "Exp", lines: +6 -1

        Resolve "operation size not specified" in NASM modules.

2005-04-03 21:16  appro

        Changed:
                Configure (1.314.2.109), "Exp", lines: +10 -0
                TABLE (1.99.2.48), "Exp", lines: +50 -0
                config (1.95.2.33), "Exp", lines: +9 -2
                crypto/bn/Makefile (1.1.4.4), "Exp", lines: +1 -0
                crypto/rc4/Makefile (1.1.4.6), "Exp", lines: +1 -1

        Extend Solaris x86 support to amd64. Note that if both gcc and Sun
        C are installed, it defaults to gcc, because it beats Sun C on
        every benchmark. Also note that gcc shared build was verified to
        work woth Sun C...

2005-04-14 00:47  appro

        Changed:
                Makefile.org (1.154.2.98), "Exp", lines: +1 -1

        Move cygcrypto.dll above cygwin.dll.

2005-04-17 06:35  steve

        Changed:
                util/pl/VC-32.pl (1.11.2.6), "Exp", lines: +1 -1

        Include user32.lib to import MessageBoxIndirect

2005-04-19 16:21  appro

        Changed:
                Configure (1.314.2.117), "Exp", lines: +24 -21
                Makefile.org (1.154.2.100), "Exp", lines: +1 -11
                TABLE (1.99.2.52), "Exp", lines: +20 -20
                apps/Makefile (1.1.4.15), "Exp", lines: +1 -1
                test/Makefile (1.1.4.12), "Exp", lines: +1 -1

        Enable shared link on HP-UX.

2005-04-20 10:27  steve

        Changed:
                Configure (1.314.2.118), "Exp", lines: +1 -1
                util/mk1mf.pl (1.41.2.12), "Exp", lines: +2 -0

        Ignore zlib related options in mk1mf.pl

2005-04-20 18:42  steve

        Changed:
                Configure (1.314.2.119), "Exp", lines: +2 -2

        Don't use kerberos library locations on windows.

2005-04-22 07:17  steve

        Changed:
                CHANGES (1.977.2.156), "Exp", lines: +5 -0
                crypto/bn/bn.h (1.66.2.4), "Exp", lines: +2 -0
                crypto/bn/bn_mont.c (1.30.2.3), "Exp", lines: +20 -0
                crypto/dh/dh_key.c (1.16.2.4), "Exp", lines: +14 -10
                crypto/dsa/dsa_ossl.c (1.12.2.7), "Exp", lines: +12 -9
                crypto/rsa/rsa_eay.c (1.28.2.10), "Exp", lines: +16 -90
                fips/fipshashes.c (1.1.2.5), "Exp", lines: +3 -3
                fips/dh/fips_dh_key.c (1.1.2.4), "Exp", lines: +13 -10
                fips/dsa/fips_dsa_ossl.c (1.1.2.8), "Exp", lines: +12 -9
                fips/rsa/fips_rsa_eay.c (1.1.4.5), "Exp", lines: +17 -90

        New function BN_MONT_CTX_set_locked, to set montgomery parameters
        in a threadsafe manner.

                Modify or add calls to use it in rsa, dsa and dh
        algorithms.

2005-04-23 06:46  nils

        Changed:
                crypto/dsa/dsa_ossl.c (1.12.2.8), "Exp", lines: +1 -1
                crypto/rsa/rsa_eay.c (1.28.2.11), "Exp", lines: +4 -4

        fix typo