1 This file, together with ChangeLog.0_9_7-stable_not-in-head_FIPS,
2 provides a collection of those CVS change log entries for the
3 0.9.7 branch (OpenSSL_0_9_7-stable) that do not appear similarly in
6 ChangeLog.0_9_7-stable_not-in-head_FIPS - "FIPS" related changes
7 ChangeLog.0_9_7-stable_not-in-head - everything else
9 Some obvious false positives have been eliminated: e.g., we do not
10 care about a simple "make update"; and we don't care about changes
11 identified to the 0.9.7 branch that were explicitly identified as
14 Eliminating all other entries (and finally this file and its
15 compantion), either as false positives or as things that should go
16 into 0.9.8, remains to be done. Any additional changes to 0.9.7 that
17 are not immediately put into 0.9.8, but belong there as well, should
18 be added to the end of this file.
21 2002-02-14 03:43 levitte
24 crypto/des/str2key.c (1.12.2.1), "Exp", lines: +12 -0
26 Because making the key strong by xoring the last byte with 0xF0
27 generates different keys than previous versions of OpenSSL and
28 libdes, let's make Assar's change experimental for now.
30 2002-02-14 14:42 levitte
33 crypto/err/err.c (1.51.2.1), "Exp", lines: +1 -1
35 For some reason, getting the topmost error was done the same way as
36 getting the bottommost one. I hope I understood correctly how this
37 should be done. It seems to work when running evp_test in an
38 environment where it can't find openssl.cnf.
40 2002-02-14 14:51 levitte
43 crypto/des/read2pwd.c (1.6.2.1), "Exp", lines: +1 -0
45 Make sure memset() is defined by including string.h Notified by
46 Oscar Jacobsson <oscar@jacobsson.org>
48 2002-02-14 17:23 levitte
51 crypto/ui/ui_openssl.c (1.11.2.1), "Exp", lines: +7 -1
52 crypto/rsa/rsa.h (1.36.2.1), "Exp", lines: +6 -6
53 crypto/rand/rand_egd.c (1.16.2.1), "Exp", lines: +5 -1
54 crypto/des/read_pwd.c (1.26.2.1), "Exp", lines: +7 -1
55 crypto/bio/bss_log.c (1.30.2.1), "Exp", lines: +1 -1
56 crypto/bio/bss_bio.c (1.31.2.1), "Exp", lines: +5 -0
57 crypto/tmdiff.c (1.9.2.1), "Exp", lines: +17 -2
58 apps/speed.c (1.83.2.1), "Exp", lines: +20 -4
59 apps/ca.c (1.102.2.1), "Exp", lines: +1 -1
60 apps/s_time.c (1.23.2.1), "Exp", lines: +20 -2
61 Configure (1.314.2.3), "Exp", lines: +3 -0
62 e_os.h (1.56.2.1), "Exp", lines: +9 -1
64 Add the configuration target VxWorks.
66 2002-02-14 19:46 steve
69 crypto/engine/hw_sureware.c (1.2.2.1), "Exp", lines: +8 -4
73 #if out some unused function.
75 "index" is a global function on some platforms.
77 2002-02-14 19:52 steve
80 crypto/tmdiff.c (1.9.2.2), "Exp", lines: +1 -0
84 2002-02-15 00:38 steve
87 CHANGES (1.977.2.2), "Exp", lines: +5 -0
88 crypto/conf/conf.h (1.30.2.1), "Exp", lines: +2 -1
89 crypto/conf/conf_mall.c (1.6.2.1), "Exp", lines: +6 -7
90 crypto/conf/conf_mod.c (1.8.2.1), "Exp", lines: +8 -0
92 Add argument to OPENSSL_config() and add flag to tolerate missing
95 2002-02-15 01:12 steve
98 NEWS (1.39.2.1), "Exp", lines: +5 -1
102 2002-02-15 01:33 steve
105 crypto/asn1/asn1.h (1.103.2.1), "Exp", lines: +3 -0
106 crypto/asn1/asn1_err.c (1.42.2.1), "Exp", lines: +3 -0
107 crypto/asn1/asn_moid.c (1.2.2.1), "Exp", lines: +21 -10
108 crypto/conf/conf_mod.c (1.8.2.2), "Exp", lines: +2 -6
110 Don't call finish function if it isn't set.
114 2002-02-15 01:58 steve
117 crypto/x509/x509_vfy.c (1.56.2.1), "Exp", lines: +23 -13
119 Allow a NULL store parameter to X509_STORE_CTX_init().
121 2002-02-15 02:01 steve
124 crypto/evp/evp_enc.c (1.28.2.1), "Exp", lines: +2 -1
126 Only initialize cipher ctx if cipher is not NULL.
128 2002-02-15 03:43 steve
131 crypto/conf/conf_mod.c (1.8.2.3), "Exp", lines: +1 -1
133 Add flag to disable config module DSO loading.
135 2002-02-20 00:24 steve
138 CHANGES (1.977.2.3), "Exp", lines: +4 -0
139 apps/apps.c (1.49.2.1), "Exp", lines: +20 -0
140 crypto/conf/conf_mall.c (1.6.2.3), "Exp", lines: +2 -14
141 crypto/conf/conf_mod.c (1.8.2.4), "Exp", lines: +15 -1
143 Use default openssl.cnf if config filename set to NULL and
144 openssl_conf if appname NULL.
146 2002-02-23 14:43 steve
149 crypto/asn1/asn_moid.c (1.2.2.2), "Exp", lines: +0 -1
156 Configure (1.314.2.6), "Exp", lines: +1 -0
160 2002-03-08 20:12 steve
163 apps/apps.c (1.49.2.4), "Exp", lines: +1 -1
167 2002-03-22 03:36 levitte
170 apps/version.c (1.13.2.1), "Exp", lines: +2 -2
171 apps/speed.c (1.83.2.6), "Exp", lines: +6 -6
172 apps/passwd.c (1.24.2.2), "Exp", lines: +2 -2
174 Use the more modern DES API in the openssl subcommands.
176 2002-03-22 11:29 levitte
179 crypto/des/des_old.h (1.9.2.4), "Exp", lines: +35 -23
181 Key schedules are given as arguments a bit differently in 0.9.6 and
182 earlier. Also, a few 0.9.6 functions were missing their mappings.
184 2002-03-22 11:46 levitte
187 crypto/des/destest.c (1.30.2.2), "Exp", lines: +37 -35
189 Key schedules are given as arguments a bit differently in 0.9.6 and
190 earlier. Also, it was an error to define crypt() at all times.
192 2002-03-26 15:25 levitte
195 CHANGES (1.977.2.15), "Exp", lines: +19 -8
196 crypto/des/des.h (1.40.2.2), "Exp", lines: +6 -0
198 Add the possibility to enable olde des support, not just disable
199 it, for future support. Redocument
201 2002-04-20 12:25 levitte
204 util/mk1mf.pl (1.41.2.1), "Exp", lines: +4 -1
206 Make sure ec is properly handled in Windows.
211 crypto/conf/conf_mod.c (1.8.2.6), "Exp", lines: +1 -1
215 2002-05-11 14:42 steve
218 ssl/ssl_cert.c (1.48.2.3), "Exp", lines: +0 -1
221 closedir is not used on Win32.
223 2002-05-22 09:53 levitte
226 apps/speed.c (1.83.2.7), "Exp", lines: +4 -1
228 Remove warnings about unused symbols when configured with no-rsa.
230 2002-05-22 09:55 levitte
233 crypto/asn1/x_pubkey.c (1.21.2.1), "Exp", lines: +1 -1
235 Remove warnings about uninitialised variables. This has already
236 been applied in the main branch.
238 2002-05-22 09:56 levitte
241 crypto/engine/hw_4758_cca.c (1.1.2.4), "Exp", lines: +14 -14
243 Use 0 instead of NULL when casting to function pointers, to avoid
244 warnings from compilers when NULL is defined as '((void *)0)'.
245 This has already been applied in the main branch.
247 2002-05-22 09:58 levitte
250 util/mkerr.pl (1.18.2.1), "Exp", lines: +2 -2
252 Update copyright years. This has already been applied in the main
255 2002-05-23 17:25 levitte
258 VMS/tcpip_shr_decc.opt (1.1.4.1), "Exp", lines: +1 -0
265 crypto/evp/evp_test.c (1.14.2.5), "Exp", lines: +1 -1
269 2002-06-05 08:45 levitte
272 ssl/ssl-lib.com (1.11.2.3), "Exp", lines: +1 -1
273 test/maketests.com (1.13.2.2), "Exp", lines: +29 -1
275 Correct syntax in ssl-lib.com maketests.com was missing the TCP/IP
276 options TCPIP and NONE
278 2002-08-13 14:19 levitte
281 demos/engines/rsaref/Makefile (1.3.2.1), "Exp", lines: +1 -1
283 Export text symbols as well (AIX experts might need to correct me
286 2002-08-13 14:26 levitte
289 demos/engines/cluster_labs/Makefile (1.1.2.1), "Exp", lines: +114 -0
290 demos/engines/cluster_labs/cluster_labs.h (1.1.2.1), "Exp", lines: +35 -0
291 demos/engines/cluster_labs/hw_cluster_labs.c (1.1.2.1), "Exp", lines: +718 -0
292 demos/engines/cluster_labs/hw_cluster_labs.ec (1.1.2.1), "Exp", lines: +8 -0
293 demos/engines/cluster_labs/hw_cluster_labs_err.c (1.1.2.1), "Exp", lines: +151 -0
294 demos/engines/cluster_labs/hw_cluster_labs_err.h (1.1.2.1), "Exp", lines: +95 -0
295 demos/engines/ibmca/Makefile (1.1.2.1), "Exp", lines: +114 -0
296 demos/engines/ibmca/hw_ibmca.c (1.1.2.1), "Exp", lines: +917 -0
297 demos/engines/ibmca/hw_ibmca.ec (1.1.2.1), "Exp", lines: +8 -0
298 demos/engines/ibmca/hw_ibmca_err.c (1.1.2.1), "Exp", lines: +154 -0
299 demos/engines/ibmca/hw_ibmca_err.h (1.1.2.1), "Exp", lines: +98 -0
300 demos/engines/ibmca/ica_openssl_api.h (1.1.2.1), "Exp", lines: +189 -0
301 demos/engines/zencod/Makefile (1.1.2.1), "Exp", lines: +114 -0
302 demos/engines/zencod/hw_zencod.c (1.1.2.1), "Exp", lines: +1736 -0
303 demos/engines/zencod/hw_zencod.ec (1.1.2.1), "Exp", lines: +8 -0
304 demos/engines/zencod/hw_zencod.h (1.1.2.1), "Exp", lines: +160 -0
305 demos/engines/zencod/hw_zencod_err.c (1.1.2.1), "Exp", lines: +151 -0
306 demos/engines/zencod/hw_zencod_err.h (1.1.2.1), "Exp", lines: +95 -0
308 OK, I've amused myself with making sure the engines that have been
309 contributed TO WORK WITH 0.9.7 can be built as dynamically loadable
312 For now, they're not included in crypto/engine/ since 0.9.7
313 is in feature freeze. Further discussion might change that, but
314 don't hold your breath.
316 2002-08-15 13:48 levitte
319 crypto/crypto-lib.com (1.53.2.8), "Exp", lines: +1 -1
321 I think that's the last forgotten compilation module.
323 2002-10-05 13:59 steve
326 crypto/engine/hw_cswift.c (1.17.2.4), "Exp", lines: +1 -1
328 Win32 fix (signed/unsigned compare error).
330 2002-10-09 14:19 levitte
333 crypto/engine/hw_cswift.c (1.17.2.5), "Exp", lines: +1 -0
335 The dissapearing destroy callback reappears
337 2002-10-24 00:09 levitte
340 crypto/crypto-lib.com (1.53.2.9), "Exp", lines: +1 -1
342 An engine changed name.
344 2002-10-29 18:46 geoff
347 doc/ssl/SSL_CTX_set_session_cache_mode.pod (1.5.2.2), "Exp", lines: +1 -0
349 Correct another inconsistency in my recent commits.
351 2002-11-04 17:33 levitte
354 Configure (1.314.2.38), "Exp", lines: +4 -2
356 Return my normal debug targets to something not so extreme, and
357 make the extreme ones special (or 'extreme', if you will :-)).
359 2002-11-13 12:35 levitte
362 crypto/cryptlib.h (1.10.2.4), "Exp", lines: +0 -4
363 crypto/crypto.h (1.62.2.3), "Exp", lines: +4 -0
365 Make OpenSSLdie() visible (it's a must to get a proper reference in
368 2002-11-13 14:36 levitte
371 crypto/pem/pem_lib.c (1.36.2.5), "Exp", lines: +1 -1
373 C++ comments in C code, 'nuff said...
375 2002-11-13 15:30 levitte
378 demos/engines/ibmca/hw_ibmca.c (1.1.2.2), "Exp", lines: +3 -0
379 demos/engines/zencod/hw_zencod.c (1.1.2.2), "Exp", lines: +4 -1
380 demos/engines/cluster_labs/hw_cluster_labs.c (1.1.2.2), "Exp", lines: +5 -2
382 The loading functions should be static if we build a dynamic
385 2002-12-12 18:41 levitte
388 crypto/engine/hw_ncipher.c (1.26.2.7), "Exp", lines: +38 -2
389 crypto/engine/hw_ncipher_err.c (1.1.2.2), "Exp", lines: +1 -1
390 crypto/engine/hw_ncipher_err.h (1.1.2.2), "Exp", lines: +1 -1
391 crypto/cryptlib.c (1.32.2.8), "Exp", lines: +2 -1
392 crypto/crypto.h (1.62.2.7), "Exp", lines: +2 -1
393 CHANGES (1.977.2.78), "Exp", lines: +14 -0
395 Add a static lock called HWCRHK, for the case of having an
396 application that wants to use the hw_ncipher engine without having
397 given any callbacks for the dynamic type of locks.
399 2002-12-15 16:27 appro
402 Makefile.org (1.154.2.41), "Exp", lines: +2 -1
404 Another Solaris shared build clean-up. This is not actually needed
405 if one uses WorkShop C. It's gcc driver that brings copy of
406 libgcc.a into .so otherwise. In case you wonder what it's -Wl,-z...
407 and not just -z. Problem is that gcc driver apparently omits all -z
408 options but -z text. Don't ask me why. I'm not committing
409 corresponding workaround into the HEAD as Makefile.shared
410 reportedly needs even more work...
412 2002-12-16 19:17 appro
415 crypto/bn/bn_lcl.h (1.23.2.3), "Exp", lines: +3 -0
416 crypto/bn/bn_mul.c (1.28.2.4), "Exp", lines: +84 -445
418 This is rollback to 0.9.6h bn_mul.c to address problem reported in
421 2002-12-16 19:59 appro
424 Makefile.org (1.154.2.42), "Exp", lines: +3 -1
426 Some of Sun compiler drivers (well, one of those I have) collect
427 all options specified with -Wl in the beginnig of the ld command
428 line which kind of obsoletes the idea as it's -z defaultextract
429 that will be closest to lib*.a and not -z allextract:-(
431 2002-12-17 15:21 levitte
434 NEWS (1.39.2.16), "Exp", lines: +4 -1
436 A few more NEWS items.
438 !2002-12-27 17:49 appro
441 ! Configure (1.314.2.62), "Exp", lines: +1 -1
443 ! According to Tim Rice <tim@multitalents.net> assembler support in
444 ! SCO5 never worked anyway. Note this is not going to HEAD as we
445 ! intend to provide an alternative solution as soon as 0.9.7 is out.
447 2002-12-28 02:35 levitte
450 Configure (1.314.2.63), "Exp", lines: +1 -1
452 Hmm, the variables $x96_elf_asm and others contain a number of
453 colons, so when removing one reference, if should be replaced with
454 the appropriate number of colons, or chaos will follow...
456 It's rather silly to believe we'd release 0.9.7a in 2002 :-).
461 crypto/des/des_locl.h (1.19.2.5), "Exp", lines: +1 -1
462 crypto/rc5/rc5_locl.h (1.3.2.4), "Exp", lines: +1 -1
464 Fix warnings, use correct -Ds.
466 2003-03-24 17:57 steve
469 crypto/x509/x509_vfy.c (1.56.2.5), "Exp", lines: +2 -2
470 crypto/x509/x509_vfy.c (1.56.2.6), "Exp", lines: +2 -2
472 Get X509_V_FLAG_CRL_CHECK_ALL logic the right way round. PR:544
474 ? 2003-04-04 16:21 levitte
477 util/mkdef.pl (1.67.2.5), "Exp", lines: +10 -5
478 util/mkerr.pl (1.18.2.3), "Exp", lines: +6 -6
480 Transfer the changes to detect multiline comments and the GCC
481 extension __attribute__.
483 2003-04-08 13:54 levitte
486 test/Makefile.ssl (1.84.2.25), "Exp", lines: +29 -1
487 apps/Makefile.ssl (1.100.2.22), "Exp", lines: +1 -0
488 Makefile.org (1.154.2.61), "Exp", lines: +4 -5
490 Set LD_LIBRARY_PATH when linking, since OpenUnix' ld uses it to
491 create a library search path.
495 2003-04-09 07:25 levitte
498 test/Makefile.ssl (1.84.2.26), "Exp", lines: +1 -1
502 2003-04-09 08:50 levitte
505 apps/Makefile.ssl (1.100.2.23), "Exp", lines: +1 -0
509 2003-04-10 03:13 steve
512 crypto/rsa/rsa_sign.c (1.11.2.6), "Exp", lines: +2 -2
514 Only call redirected rsa_sign or rsa_verify if the pointer is set.
516 This allows, for example, a smart card to redirect rsa_sign
517 and keep the default rsa_verify.
519 2003-07-03 23:43 levitte
522 Makefile.org (1.154.2.65), "Exp", lines: +2 -2
524 Add a slash so grep doesn't return both ./crypto/bio/bss_mem.o and
525 ./crypto/mem.o when we're looking for mem.o.
530 crypto/aes/aes.h (1.1.2.5), "Exp", lines: +3 -0
531 crypto/aes/aes_cfb.c (1.1.2.4), "Exp", lines: +57 -0
533 Add untested CFB-r mode. Will be tested soon.
538 Makefile.org (1.154.2.69), "Exp", lines: +5 -1
539 crypto/aes/aes.h (1.1.2.6), "Exp", lines: +3 -0
540 crypto/aes/aes_cfb.c (1.1.2.5), "Exp", lines: +19 -0
541 crypto/dsa/Makefile.ssl (1.49.2.6), "Exp", lines: +3 -2
542 crypto/err/Makefile.ssl (1.48.2.4), "Exp", lines: +17 -16
543 crypto/evp/e_aes.c (1.6.2.5), "Exp", lines: +8 -0
544 crypto/evp/e_des.c (1.5.2.2), "Exp", lines: +1 -1
545 crypto/evp/e_des3.c (1.8.2.3), "Exp", lines: +2 -2
546 crypto/evp/evp.h (1.86.2.11), "Exp", lines: +28 -11
547 crypto/evp/evp_locl.h (1.7.2.3), "Exp", lines: +2 -2
548 crypto/objects/obj_dat.h (1.49.2.13), "Exp", lines: +10 -5
549 crypto/objects/obj_mac.h (1.19.2.13), "Exp", lines: +5 -0
550 crypto/objects/obj_mac.num (1.15.2.9), "Exp", lines: +1 -0
551 crypto/objects/objects.txt (1.20.2.14), "Exp", lines: +4 -0
552 fips/Makefile.ssl (1.1.2.3), "Exp", lines: +7 -0
553 fips/aes/Makefile.ssl (1.1.2.2), "Exp", lines: +23 -1
554 fips/aes/fips_aesavs.c (1.1.2.3), "Exp", lines: +9 -1
555 test/Makefile.ssl (1.84.2.30), "Exp", lines: +101 -43
557 Add support for partial CFB modes, make tests work, update
563 crypto/aes/aes_cfb.c (1.1.2.6), "Exp", lines: +9 -6
564 crypto/evp/c_allc.c (1.8.2.3), "Exp", lines: +1 -0
565 crypto/evp/evp_test.c (1.14.2.11), "Exp", lines: +17 -8
566 crypto/evp/evptests.txt (1.9.2.2), "Exp", lines: +48 -1
568 Working CFB1 and test vectors.
573 crypto/evp/e_aes.c (1.6.2.6), "Exp", lines: +14 -0
574 crypto/objects/obj_dat.h (1.49.2.14), "Exp", lines: +15 -5
575 crypto/objects/obj_mac.h (1.19.2.14), "Exp", lines: +10 -0
576 crypto/objects/obj_mac.num (1.15.2.10), "Exp", lines: +2 -0
577 crypto/objects/objects.txt (1.20.2.15), "Exp", lines: +2 -0
578 fips/aes/Makefile.ssl (1.1.2.3), "Exp", lines: +1 -1
579 fips/aes/fips_aesavs.c (1.1.2.4), "Exp", lines: +34 -19
581 The rest of the keysizes for CFB1, working AES AVS test for CFB1.
586 crypto/aes/aes.h (1.1.2.7), "Exp", lines: +3 -0
587 crypto/aes/aes_cfb.c (1.1.2.7), "Exp", lines: +14 -0
588 crypto/evp/c_allc.c (1.8.2.4), "Exp", lines: +1 -0
589 crypto/evp/e_aes.c (1.6.2.7), "Exp", lines: +4 -9
590 crypto/evp/evptests.txt (1.9.2.3), "Exp", lines: +48 -0
591 crypto/objects/obj_dat.h (1.49.2.15), "Exp", lines: +20 -5
592 crypto/objects/obj_mac.h (1.19.2.15), "Exp", lines: +15 -0
593 crypto/objects/obj_mac.num (1.15.2.11), "Exp", lines: +3 -0
594 crypto/objects/objects.txt (1.20.2.16), "Exp", lines: +3 -0
595 fips/aes/fips_aesavs.c (1.1.2.7), "Exp", lines: +11 -0
602 Makefile.org (1.154.2.70), "Exp", lines: +16 -5
603 crypto/des/cfb_enc.c (1.7.2.1), "Exp", lines: +2 -1
604 crypto/des/des_enc.c (1.11.2.2), "Exp", lines: +4 -0
605 crypto/evp/e_aes.c (1.6.2.8), "Exp", lines: +7 -14
606 crypto/evp/e_des.c (1.5.2.3), "Exp", lines: +37 -1
607 crypto/evp/evp.h (1.86.2.12), "Exp", lines: +6 -0
608 crypto/evp/evp_locl.h (1.7.2.4), "Exp", lines: +9 -0
609 crypto/objects/obj_dat.h (1.49.2.16), "Exp", lines: +48 -23
610 crypto/objects/obj_mac.h (1.19.2.16), "Exp", lines: +31 -6
611 crypto/objects/obj_mac.num (1.15.2.12), "Exp", lines: +5 -0
612 crypto/objects/objects.txt (1.20.2.17), "Exp", lines: +12 -6
613 fips/Makefile.ssl (1.1.2.4), "Exp", lines: +8 -1
614 fips/fips_make_sha1 (1.1.2.3), "Exp", lines: +3 -0
615 fips/aes/Makefile.ssl (1.1.2.4), "Exp", lines: +1 -1
616 fips/des/.cvsignore (1.1.2.1), "Exp", lines: +3 -0
617 fips/des/Makefile.ssl (1.1.2.1), "Exp", lines: +96 -0
618 fips/des/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
619 fips/des/fips_des_enc.c (1.1.2.1), "Exp", lines: +288 -0
620 fips/des/fips_des_locl.h (1.1.2.1), "Exp", lines: +428 -0
621 fips/des/fips_desmovs.c (1.1.2.1), "Exp", lines: +659 -0
623 Whoops, forgot FIPS DES, also add EVPs for DES CFB1 and 8.
625 2003-07-31 23:30 levitte
628 Makefile.org (1.154.2.71), "Exp", lines: +2 -0
630 If FDIRS is to be treated like SDIRS, let's not forget to
631 initialize it in Makefile.org.
636 crypto/des/cfb_enc.c (1.7.2.2), "Exp", lines: +45 -36
637 crypto/evp/c_allc.c (1.8.2.5), "Exp", lines: +2 -0
638 crypto/evp/e_des.c (1.5.2.4), "Exp", lines: +8 -3
639 crypto/evp/evptests.txt (1.9.2.4), "Exp", lines: +6 -0
646 crypto/evp/evptests.txt (1.9.2.5), "Exp", lines: +4 -0
650 2003-08-01 19:06 steve
653 crypto/evp/evp_lib.c (1.6.8.2), "Exp", lines: +24 -0
654 crypto/objects/obj_dat.h (1.49.2.17), "Exp", lines: +15 -46
655 crypto/objects/obj_mac.h (1.19.2.17), "Exp", lines: +1 -24
656 crypto/objects/obj_mac.num (1.15.2.13), "Exp", lines: +1 -4
657 crypto/objects/objects.txt (1.20.2.18), "Exp", lines: +8 -12
659 Make the EFB NIDs have empty OIDs aliased to the real EFB OID.
661 2003-08-11 11:56 levitte
664 apps/Makefile.ssl (1.100.2.24), "Exp", lines: +1 -1
666 Oops, removed a little too much.
668 2003-08-11 13:46 levitte
671 test/Makefile.ssl (1.84.2.33), "Exp", lines: +28 -28
673 Don't fiddle with LD_LIBRARY_PATH when building non-static.
675 2003-08-14 08:54 levitte
678 apps/Makefile.ssl (1.100.2.25), "Exp", lines: +1 -1
679 test/Makefile.ssl (1.84.2.34), "Exp", lines: +28 -28
681 Undo the change that left LD_LIBRARY_PATH unchanged. The errors I
682 saw weren't due to that, but to a change on the SCO machines I used
683 for testing, where my $PATH was suddenly incorrect.
685 2003-09-27 20:31 levitte
688 apps/pkcs8.c (1.22.2.8), "Exp", lines: +5 -6
690 Remove extra argument to BIO_printf(). PR: 685
692 2003-09-29 19:10 steve
695 crypto/bio/bss_file.c (1.14.2.4), "Exp", lines: +2 -2
697 Fix to make it compile under Win32.
699 2003-11-19 06:18 geoff
702 crypto/x509/x509.h (1.116.2.4), "Exp", lines: +0 -4
704 Remove duplicate prototypes have already been (correctly) added to
705 rsa.h, as this is already included by x509.h anyway.
707 2004-01-21 10:58 appro
710 Configure (1.314.2.89), "Exp", lines: +1 -0
711 config (1.95.2.27), "Exp", lines: +7 -6
712 crypto/bn/Makefile.ssl (1.65.2.7), "Exp", lines: +3 -0
714 Proper support for HP-UX64 gcc build. PR: 772
716 2004-01-29 10:41 levitte
719 crypto/bn/bn_lcl.h (1.23.2.6), "Exp", lines: +8 -9
721 Have the declarations match the definitions.
723 2004-03-16 06:50 steve
726 apps/x509.c (1.67.2.14), "Exp", lines: +0 -1
727 ssl/kssl.c (1.20.2.12), "Exp", lines: +2 -2
731 2004-03-17 05:01 mark
734 CHANGES (1.977.2.128), "Exp", lines: +9 -1
735 FAQ (1.61.2.30), "Exp", lines: +1 -1
736 LICENSE (1.7.2.3), "Exp", lines: +1 -1
737 NEWS (1.39.2.21), "Exp", lines: +8 -0
738 README (1.39.2.24), "Exp", lines: +2 -2
739 STATUS (1.211.2.41), "Exp", lines: +4 -1
740 openssl.spec (1.6.2.6), "Exp", lines: +1 -1
741 crypto/opensslv.h (1.40.2.21), "Exp", lines: +2 -2
742 ssl/s3_pkt.c (1.46.2.6), "Exp", lines: +8 -0
743 ssl/s3_srvr.c (1.85.2.20), "Exp", lines: +16 -0
745 Fix null-pointer assignment in do_change_cipher_spec() revealed by
746 using the Codenomicon TLS Test Tool (CAN-2004-0079) Fix flaw in
747 SSL/TLS handshaking when using Kerberos ciphersuites
748 (CAN-2004-0112) Ready for 0.9.7d build
750 Submitted by: Steven Henson Reviewed by: Joe Orton Approved
753 2004-03-25 01:57 steve
756 crypto/pkcs7/pk7_doit.c (1.50.2.9), "Exp", lines: +9 -4
757 crypto/pkcs7/pk7_doit.c (1.50.2.4.2.2), "Exp", lines: +9 -4
759 Make S/MIME encrypt work again.
761 2004-04-02 14:39 levitte
764 crypto/bn/Makefile.ssl (1.65.2.8), "Exp", lines: +1 -1
766 Typo. "pa-rics2W" corrected to "pa-risc2W". PR: 868
768 2004-05-12 12:09 levitte
771 apps/apps.h (1.44.2.13), "Exp", lines: +0 -6
772 crypto/o_str.c (1.5.2.1), "Exp", lines: +4 -3
773 crypto/o_str.h (1.2.6.1), "Exp", lines: +0 -0
775 The functions OPENSSL_strcasen?cmp() were forgotten when merging
776 the FIPS branch into this. It's needed at least for certain
777 OpenVMS versions, and should really be used in a more general way.
779 2004-05-12 12:17 levitte
782 crypto/Makefile (1.1.4.2), "Exp", lines: +3 -3
784 Forgot to update the Makefile with the o_str stuff...
789 crypto/rand/rand.h (1.26.2.8), "Exp", lines: +2 -0
790 crypto/rand/rand_err.c (1.6.2.4), "Exp", lines: +2 -0
791 fips/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
792 fips/fips.c (1.1.2.4), "Exp", lines: +5 -1
793 fips/rand/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
794 fips/rand/fips_rand.c (1.1.2.5), "Exp", lines: +29 -0
796 Blow up in people's faces if they don't reseed.
798 2004-05-12 19:53 steve
801 apps/x509.c (1.67.2.16), "Exp", lines: +0 -7
805 2004-05-14 19:54 levitte
808 util/libeay.num (1.173.2.20), "Exp", lines: +43 -54
810 All EVP_*_cfb functions have changed names to EVP_*_cfb64 or
816 ssl/s23_clnt.c (1.20.2.6), "Exp", lines: +5 -2
817 ssl/s2_clnt.c (1.37.2.11), "Exp", lines: +5 -2
818 ssl/s2_srvr.c (1.36.2.8), "Exp", lines: +6 -3
819 ssl/s3_clnt.c (1.53.2.17), "Exp", lines: +2 -1
820 ssl/s3_srvr.c (1.85.2.22), "Exp", lines: +4 -2
821 ssl/ssl_sess.c (1.40.2.8), "Exp", lines: +2 -1
828 crypto/dh/dh.h (1.23.2.6), "Exp", lines: +1 -0
829 crypto/dh/dh_err.c (1.6.2.3), "Exp", lines: +2 -1
830 crypto/dh/dh_gen.c (1.8.8.2), "Exp", lines: +9 -0
831 fips/fips_test_suite.c (1.1.4.2), "Exp", lines: +4 -3
832 fips/aes/fips_aesavs.c (1.1.2.11), "Exp", lines: +49 -1
833 fips/des/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
834 fips/des/fips_desmovs.c (1.1.2.5), "Exp", lines: +49 -1
835 fips/des/fips_set_key.c (1.1.4.2), "Exp", lines: +2 -0
836 fips/sha1/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
837 fips/sha1/fips_md32_common.h (1.1.2.4), "Exp", lines: +3 -0
838 fips/sha1/standalone.sha1 (1.1.2.6), "Exp", lines: +1 -1
840 Fix self-tests, ban some things in FIPS mode, fix copyrights.
842 2004-05-17 06:28 levitte
845 util/mk1mf.pl (1.41.2.11), "Exp", lines: +8 -2
846 util/pl/BC-16.pl (1.2.2.2), "Exp", lines: +9 -4
847 util/pl/BC-32.pl (1.11.2.5), "Exp", lines: +8 -3
848 util/pl/Mingw32.pl (1.12.6.6), "Exp", lines: +7 -2
849 util/pl/OS2-EMX.pl (1.1.2.4), "Exp", lines: +7 -2
850 util/pl/VC-16.pl (1.3.2.2), "Exp", lines: +7 -2
851 util/pl/VC-32.pl (1.11.2.4), "Exp", lines: +7 -2
852 util/pl/VC-CE.pl (1.1.2.6), "Exp", lines: +7 -2
853 util/pl/linux.pl (1.3.6.1), "Exp", lines: +7 -2
854 util/pl/ultrix.pl (1.2.8.2), "Exp", lines: +7 -2
855 util/pl/unix.pl (1.2.8.1), "Exp", lines: +7 -2
857 Generate SHA1 files on Windows and other platforms supported by
858 mk1mf.pl, when building in FIPS mode.
862 2004-05-17 06:30 levitte
865 apps/apps.h (1.44.2.14), "Exp", lines: +3 -0
866 apps/openssl.c (1.48.2.10), "Exp", lines: +9 -5
868 Make sure the applications know when we are running in FIPS mode.
869 We can't use the variable in libcrypto, since it's supposedly
872 Note: currently only supported in MONOLITH mode.
874 2004-05-17 06:31 levitte
877 apps/enc.c (1.35.2.9), "Exp", lines: +10 -1
879 When in FIPS mode, use SHA1 to digest the key, rather than MD5, as
880 MD5 isn't a FIPS-approved algorithm.
882 Note: this means the user needs to keep track of this, and
883 we need to add support for that...
885 2004-05-17 06:39 levitte
888 apps/enc.c (1.35.2.10), "Exp", lines: +14 -0
890 Make it possible for the user to choose the digest used to create
893 2004-05-17 06:40 levitte
896 apps/enc.c (1.35.2.11), "Exp", lines: +4 -4
898 Rewrite the usage to avoid confusion.
900 2004-05-17 06:47 levitte
903 apps/enc.c (1.35.2.12), "Exp", lines: +1 -1
910 Makefile.org (1.154.2.81), "Exp", lines: +2 -7
912 Make make tags make tags.
917 apps/Makefile (1.1.4.3), "Exp", lines: +3 -3
918 apps/prime.c (1.1.2.1), "Exp", lines: +115 -0
919 apps/progs.h (1.26.2.3), "Exp", lines: +2 -0
921 Add primality tester.
923 2004-06-21 20:05 levitte
926 Makefile.org (1.154.2.82), "Exp", lines: +3 -1
928 Standard sh doesn't tolerate ! as part of the conditional command.
932 2004-06-24 14:12 steve
935 apps/prime.c (1.1.2.2), "Exp", lines: +3 -0
937 Include <string.h> to get definition of strcmp.
939 2004-06-24 14:31 steve
942 crypto/evp/evp_lib.c (1.6.8.5), "Exp", lines: +2 -2
944 Return an error if an attempt is made to encode or decode cipher
945 ASN1 parameters and the cipher doesn't support it.
947 2004-07-04 18:36 steve
950 crypto/asn1/p5_pbev2.c (1.20.2.2), "Exp", lines: +2 -1
954 2004-07-21 19:41 steve
957 crypto/pem/pem_all.c (1.20.2.1), "Exp", lines: +119 -0
959 When in FIPS mode write private keys in PKCS#8 and PBES2 format to
960 avoid use of prohibited MD5 algorithm.
965 fips/rand/fingerprint.sha1 (1.1.2.7), "Exp", lines: +1 -1
966 fips/rand/fips_rand.c (1.1.2.7), "Exp", lines: +22 -7
967 fips/rand/fips_randtest.c (1.1.2.5), "Exp", lines: +2 -2
971 2004-07-24 15:40 appro
974 ssl/ssl_cert.c (1.48.2.9), "Exp", lines: +5 -2
976 Add casts where casts due. It's "safe" to cast, because "wrong"
977 casts will either be optimized away or never performed. The trouble
978 is that compiler first parses code, then optimizes, not both at
981 2004-07-27 16:09 levitte
984 makevms.com (1.35.2.5), "Exp", lines: +1 -1
988 2004-08-02 16:15 levitte
991 crypto/cryptlib.c (1.32.2.13), "Exp", lines: +4 -4
993 Let's lock a write lock when changing values, shall we?
995 Thanks to Dr Stephen Henson <shenson@drh-consultancy.co.uk>
996 for making me aware of this error.
998 2004-08-09 14:13 levitte
1001 makevms.com (1.35.2.8), "Exp", lines: +1 -1
1003 In the fips directory, we use FIPS-LIB.COM, not CRYPTO-LIB.COM...
1005 2004-08-11 22:34 levitte
1008 apps/makeapps.com (1.18.2.6), "Exp", lines: +2 -2
1010 Another missing module in the VMS build files. I believe this is
1013 2004-09-10 22:27 steve
1016 crypto/x509/x509_req.c (1.13.2.2), "Exp", lines: +1 -1
1020 2004-09-11 11:45 levitte
1023 test/testenc.com (1.6.8.2), "Exp", lines: +1 -1
1025 Makefile.ssl changed name to Makefile...
1027 2004-09-14 00:30 steve
1030 crypto/asn1/a_strex.c (1.8.2.6), "Exp", lines: +7 -2
1032 ASN1_STRING_to_UTF8() assumed that the MBSTRING_* flags were of the
1033 form MBSTRING_FLAG|nbyte where "nbyte" is the number of bytes per
1036 Unfortunately this isn't so and we can't change the
1037 #defines because this would break binary compatibility, so for
1038 0.9.7X only translate between the two.
1040 2004-09-14 00:39 steve
1043 crypto/x509/x509_req.c (1.13.2.3), "Exp", lines: +1 -1
1045 Oops, forgot to reorder extension request nids.
1047 2004-10-14 07:51 levitte
1050 VMS/mkshared.com (1.3.2.1), "Exp", lines: +8 -0
1052 We need to check for OPENSSL_FIPS when building shared libraries,
1053 so we get correct transfer vectors for those functions when
1056 2004-10-26 13:47 steve
1059 util/mkfiles.pl (1.12.2.2), "Exp", lines: +1 -0
1061 Add fips/dh directory to mkfiles.pl
1063 2004-11-11 02:18 steve
1066 crypto/engine/vendor_defns/sureware.h (1.2.2.1), "Exp", lines: +1 -1
1068 The use of "exp" as a variable name in a prototype causes a
1069 conflict with FC2 headers.
1071 2004-11-13 14:52 steve
1074 crypto/evp/e_old.c (1.1.2.2), "Exp", lines: +1 -1
1078 Use OPENSSL_NO_CAST, not OPENSSL_NO_CAST5 in e_old.c
1080 2004-11-27 13:55 steve
1083 apps/prime.c (1.1.2.3), "Exp", lines: +28 -17
1085 Fix leaks and give an error if no argument specified in prime.c
1087 2004-11-27 14:02 steve
1090 apps/prime.c (1.1.2.4), "Exp", lines: +7 -8
1092 Remove unnecessary check and call BIO_free_all() on bio_out to
1093 avoid a leak on VMS.
1095 2004-12-09 19:00 appro
1098 apps/openssl.c (1.48.2.11), "Exp", lines: +1 -1
1100 Eliminate dependency on UNICODE macro.
1102 2004-12-20 14:18 appro
1105 util/mklink.pl (1.6.2.2), "Exp", lines: +1 -0
1107 When re-linking files, really relink them. In other words, emulate
1110 2004-12-28 00:48 appro
1113 Configure (1.314.2.103), "Exp", lines: +1 -2
1114 Makefile.org (1.154.2.92), "Exp", lines: +2 -2
1116 Cosmetic mingw update. PR: 924
1118 2005-01-09 18:58 appro
1121 crypto/evp/c_alld.c (1.4.2.1), "Exp", lines: +1 -1
1122 crypto/evp/m_sha.c (1.8.2.1), "Exp", lines: +1 -1
1123 crypto/sha/shatest.c (1.11.2.2), "Exp", lines: +2 -2
1125 Allow for ./config no-sha0. PR: 993
1127 2005-01-11 07:53 levitte
1130 apps/apps.c (1.49.2.31), "Exp", lines: +0 -16
1132 Remove VMS_strcasecmp() from apps.c, it's not used any more. And
1133 besides, the implementation is bogus.
1135 2005-01-31 02:40 steve
1138 crypto/asn1/a_verify.c (1.12.2.3), "Exp", lines: +7 -6
1142 2005-01-31 02:46 steve
1145 test/testss (1.7.2.1), "Exp", lines: +1 -1
1147 Use SHA1 for test certificates so FIPS SSL/TLS tests work.
1149 2005-02-03 12:09 appro
1152 Configure (1.314.2.105), "Exp", lines: +2 -2
1153 Makefile.org (1.154.2.94), "Exp", lines: +16 -6
1154 TABLE (1.99.2.44), "Exp", lines: +2 -2
1156 Final HP-UX specific touches to "cope with run-time linker on
1157 multi-ABI platforms."
1159 2005-03-12 10:28 appro
1162 Makefile.org (1.154.2.95), "Exp", lines: +9 -2
1163 apps/Makefile (1.1.4.13), "Exp", lines: +0 -1
1164 test/Makefile (1.1.4.9), "Exp", lines: +0 -1
1166 Move copying of .dll to apps/ and test/ to more appropriate place.
1168 2005-03-12 13:15 appro
1171 apps/Makefile (1.1.4.14), "Exp", lines: +4 -2
1172 test/Makefile (1.1.4.10), "Exp", lines: +42 -194
1174 Fold rules in test/Makefile and provide hooks for updated FIPS
1177 2005-03-15 10:46 appro
1180 Makefile.org (1.154.2.96), "Exp", lines: +1 -1
1181 crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3
1182 fips/Makefile (1.1.4.8), "Exp", lines: +4 -1
1184 Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this
1185 in crypto/Makefile and make Makefile.org and fips/Makefile more
1188 2005-03-26 20:32 appro
1191 crypto/perlasm/x86nasm.pl (1.2.8.8), "Exp", lines: +6 -1
1193 Resolve "operation size not specified" in NASM modules.
1195 2005-04-03 21:16 appro
1198 Configure (1.314.2.109), "Exp", lines: +10 -0
1199 TABLE (1.99.2.48), "Exp", lines: +50 -0
1200 config (1.95.2.33), "Exp", lines: +9 -2
1201 crypto/bn/Makefile (1.1.4.4), "Exp", lines: +1 -0
1202 crypto/rc4/Makefile (1.1.4.6), "Exp", lines: +1 -1
1204 Extend Solaris x86 support to amd64. Note that if both gcc and Sun
1205 C are installed, it defaults to gcc, because it beats Sun C on
1206 every benchmark. Also note that gcc shared build was verified to
1209 2005-04-14 00:47 appro
1212 Makefile.org (1.154.2.98), "Exp", lines: +1 -1
1214 Move cygcrypto.dll above cygwin.dll.
1216 2005-04-15 10:00 nils
1219 doc/HOWTO/keys.txt (1.1.2.2), "Exp", lines: +3 -3
1220 doc/crypto/EVP_EncryptInit.pod (1.10.2.5), "Exp", lines: +3 -3
1222 EVP_CIPHER_CTX_init is a void function + fix typo
1226 2005-04-17 06:35 steve
1229 util/pl/VC-32.pl (1.11.2.6), "Exp", lines: +1 -1
1231 Include user32.lib to import MessageBoxIndirect
1233 2005-04-19 16:21 appro
1236 Configure (1.314.2.117), "Exp", lines: +24 -21
1237 Makefile.org (1.154.2.100), "Exp", lines: +1 -11
1238 TABLE (1.99.2.52), "Exp", lines: +20 -20
1239 apps/Makefile (1.1.4.15), "Exp", lines: +1 -1
1240 test/Makefile (1.1.4.12), "Exp", lines: +1 -1
1242 Enable shared link on HP-UX.
1244 2005-04-20 10:27 steve
1247 Configure (1.314.2.118), "Exp", lines: +1 -1
1248 util/mk1mf.pl (1.41.2.12), "Exp", lines: +2 -0
1250 Ignore zlib related options in mk1mf.pl
1252 2005-04-20 18:42 steve
1255 Configure (1.314.2.119), "Exp", lines: +2 -2
1257 Don't use kerberos library locations on windows.
1259 2005-04-22 07:17 steve
1262 CHANGES (1.977.2.156), "Exp", lines: +5 -0
1263 crypto/bn/bn.h (1.66.2.4), "Exp", lines: +2 -0
1264 crypto/bn/bn_mont.c (1.30.2.3), "Exp", lines: +20 -0
1265 crypto/dh/dh_key.c (1.16.2.4), "Exp", lines: +14 -10
1266 crypto/dsa/dsa_ossl.c (1.12.2.7), "Exp", lines: +12 -9
1267 crypto/rsa/rsa_eay.c (1.28.2.10), "Exp", lines: +16 -90
1268 fips/fipshashes.c (1.1.2.5), "Exp", lines: +3 -3
1269 fips/dh/fips_dh_key.c (1.1.2.4), "Exp", lines: +13 -10
1270 fips/dsa/fips_dsa_ossl.c (1.1.2.8), "Exp", lines: +12 -9
1271 fips/rsa/fips_rsa_eay.c (1.1.4.5), "Exp", lines: +17 -90
1273 New function BN_MONT_CTX_set_locked, to set montgomery parameters
1274 in a threadsafe manner.
1276 Modify or add calls to use it in rsa, dsa and dh
1279 2005-04-23 06:46 nils
1282 crypto/dsa/dsa_ossl.c (1.12.2.8), "Exp", lines: +1 -1
1283 crypto/rsa/rsa_eay.c (1.28.2.11), "Exp", lines: +4 -4