5 This file gives a brief overview of the major changes between each OpenSSL
6 release. For more details please read the CHANGES file.
8 Major changes between OpenSSL 0.9.4 and OpenSSL 0.9.5:
10 o S/MIME support in new 'smime' command
11 o Documentation for the OpenSSL command line application
12 o Automation of 'req' application
13 o Fixes to make s_client, s_server work under Windows
14 o Support for multiple fieldnames in SPKACs
15 o New SPKAC command line utilty and associated library functions
16 o Options to allow passwords to be obtained from various sources
17 o New public key PEM format and options to handle it
18 o Many other fixes and enhancements to command line utilities
19 o Usable certificate chain verification
20 o Certificate purpose checking
21 o Certificate trust settings
22 o Support of authority information access extension
23 o Extensions in certificate requests
24 o Simplified X509 name and attribute routines
25 o Initial (incomplete) support for international character sets
26 o New DH_METHOD, DSA_METHOD and enhanced RSA_METHOD
27 o Read only memory BIOs and simplified creation function
28 o TLS/SSL code now "tolerates" MS SGC
29 o Work around for Netscape client certificate hang bug.
30 o RSA_NULL option that removes RSA patent code but keeps other
32 o Memory leak detection now allows applications to add extra information
33 via a per-thread stack
34 o PRNG robustness improved
35 o BIGNUM library bug fixes
36 o Enhanced support for Alpha Linux
37 o Experimental MacOS support
39 Major changes between OpenSSL 0.9.3 and OpenSSL 0.9.4:
41 o Transparent support for PKCS#8 format private keys: these are used
42 by several software packages and are more secure than the standard
44 o PKCS#5 v2.0 implementation
45 o Password callbacks have a new void * argument for application data
46 o Avoid various memory leaks
47 o New pipe-like BIO that allows using the SSL library when actual I/O
48 must be handled by the application (BIO pair)
50 Major changes between OpenSSL 0.9.2b and OpenSSL 0.9.3:
51 o Lots of enhancements and cleanups to the Configuration mechanism
52 o RSA OEAP related fixes
53 o Added `openssl ca -revoke' option for revoking a certificate
54 o Source cleanups: const correctness, type-safe stacks and ASN.1 SETs
55 o Source tree cleanups: removed lots of obsolete files
56 o Thawte SXNet, certificate policies and CRL distribution points
58 o Preliminary (experimental) S/MIME support
59 o Support for ASN.1 UTF8String and VisibleString
60 o Full integration of PKCS#12 code
61 o Sparc assembler bignum implementation, optimized hash functions
62 o Option to disable selected ciphers
64 Major changes between OpenSSL 0.9.1c and OpenSSL 0.9.2b:
65 o Fixed a security hole related to session resumption
66 o Fixed RSA encryption routines for the p < q case
67 o "ALL" in cipher lists now means "everything except NULL ciphers"
68 o Support for Triple-DES CBCM cipher
69 o Support of Optimal Asymmetric Encryption Padding (OAEP) for RSA
70 o First support for new TLSv1 ciphers
71 o Added a few new BIOs (syslog BIO, reliable BIO)
72 o Extended support for DSA certificate/keys.
73 o Extended support for Certificate Signing Requests (CSR)
74 o Initial support for X.509v3 extensions
75 o Extended support for compression inside the SSL record layer
76 o Overhauled Win32 builds
77 o Cleanups and fixes to the Big Number (BN) library
78 o Support for ASN.1 GeneralizedTime
79 o Splitted ASN.1 SETs from SEQUENCEs
80 o ASN1 and PEM support for Netscape Certificate Sequences
81 o Overhauled Perl interface
82 o Lots of source tree cleanups.
83 o Lots of memory leak fixes.
86 Major changes between SSLeay 0.9.0b and OpenSSL 0.9.1c:
87 o Integration of the popular NO_RSA/NO_DSA patches
88 o Initial support for compression inside the SSL record layer
89 o Added BIO proxy and filtering functionality
90 o Extended Big Number (BN) library
91 o Added RIPE MD160 message digest
92 o Addeed support for RC2/64bit cipher
93 o Extended ASN.1 parser routines
94 o Adjustations of the source tree for CVS
95 o Support for various new platforms