This file, together with ChangeLog.0_9_7-stable_not-in-head_FIPS, provides a collection of those CVS change log entries for the 0.9.7 branch (OpenSSL_0_9_7-stable) that do not appear similarly in 0.9.8-dev (CVS head). ChangeLog.0_9_7-stable_not-in-head_FIPS - "FIPS" related changes ChangeLog.0_9_7-stable_not-in-head - everything else Some obvious false positives have been eliminated: e.g., we do not care about a simple "make update"; and we don't care about changes identified to the 0.9.7 branch that were explicitly identified as backports from head. Eliminating all other entries (and finally this file and its compantion), either as false positives or as things that should go into 0.9.8, remains to be done. Any additional changes to 0.9.7 that are not immediately put into 0.9.8, but belong there as well, should be added to the end of this file. 2002-03-01 16:39 ben Changed: Configure (1.314.2.6), "Exp", lines: +1 -0 OpenBSD variant. 2002-10-29 18:46 geoff Changed: doc/ssl/SSL_CTX_set_session_cache_mode.pod (1.5.2.2), "Exp", lines: +1 -0 Correct another inconsistency in my recent commits. 2002-11-04 17:33 levitte Changed: Configure (1.314.2.38), "Exp", lines: +4 -2 Return my normal debug targets to something not so extreme, and make the extreme ones special (or 'extreme', if you will :-)). 2002-12-15 16:27 appro Changed: Makefile.org (1.154.2.41), "Exp", lines: +2 -1 Another Solaris shared build clean-up. This is not actually needed if one uses WorkShop C. It's gcc driver that brings copy of libgcc.a into .so otherwise. In case you wonder what it's -Wl,-z... and not just -z. Problem is that gcc driver apparently omits all -z options but -z text. Don't ask me why. I'm not committing corresponding workaround into the HEAD as Makefile.shared reportedly needs even more work... 2002-12-16 19:17 appro Changed: crypto/bn/bn_lcl.h (1.23.2.3), "Exp", lines: +3 -0 crypto/bn/bn_mul.c (1.28.2.4), "Exp", lines: +84 -445 This is rollback to 0.9.6h bn_mul.c to address problem reported in RT#272. 2002-12-16 19:59 appro Changed: Makefile.org (1.154.2.42), "Exp", lines: +3 -1 Some of Sun compiler drivers (well, one of those I have) collect all options specified with -Wl in the beginnig of the ld command line which kind of obsoletes the idea as it's -z defaultextract that will be closest to lib*.a and not -z allextract:-( !2002-12-27 17:49 appro ! ! Changed: ! Configure (1.314.2.62), "Exp", lines: +1 -1 ! ! According to Tim Rice assembler support in ! SCO5 never worked anyway. Note this is not going to HEAD as we ! intend to provide an alternative solution as soon as 0.9.7 is out. 2003-01-01 16:48 ben Changed: crypto/des/des_locl.h (1.19.2.5), "Exp", lines: +1 -1 crypto/rc5/rc5_locl.h (1.3.2.4), "Exp", lines: +1 -1 Fix warnings, use correct -Ds. 2003-07-27 15:46 ben Changed: crypto/aes/aes.h (1.1.2.5), "Exp", lines: +3 -0 crypto/aes/aes_cfb.c (1.1.2.4), "Exp", lines: +57 -0 Add untested CFB-r mode. Will be tested soon. 2003-07-28 17:07 ben Changed: Makefile.org (1.154.2.69), "Exp", lines: +5 -1 crypto/aes/aes.h (1.1.2.6), "Exp", lines: +3 -0 crypto/aes/aes_cfb.c (1.1.2.5), "Exp", lines: +19 -0 crypto/dsa/Makefile.ssl (1.49.2.6), "Exp", lines: +3 -2 crypto/err/Makefile.ssl (1.48.2.4), "Exp", lines: +17 -16 crypto/evp/e_aes.c (1.6.2.5), "Exp", lines: +8 -0 crypto/evp/e_des.c (1.5.2.2), "Exp", lines: +1 -1 crypto/evp/e_des3.c (1.8.2.3), "Exp", lines: +2 -2 crypto/evp/evp.h (1.86.2.11), "Exp", lines: +28 -11 crypto/evp/evp_locl.h (1.7.2.3), "Exp", lines: +2 -2 crypto/objects/obj_dat.h (1.49.2.13), "Exp", lines: +10 -5 crypto/objects/obj_mac.h (1.19.2.13), "Exp", lines: +5 -0 crypto/objects/obj_mac.num (1.15.2.9), "Exp", lines: +1 -0 crypto/objects/objects.txt (1.20.2.14), "Exp", lines: +4 -0 fips/Makefile.ssl (1.1.2.3), "Exp", lines: +7 -0 fips/aes/Makefile.ssl (1.1.2.2), "Exp", lines: +23 -1 fips/aes/fips_aesavs.c (1.1.2.3), "Exp", lines: +9 -1 test/Makefile.ssl (1.84.2.30), "Exp", lines: +101 -43 Add support for partial CFB modes, make tests work, update dependencies. 2003-07-29 12:56 ben Changed: crypto/aes/aes_cfb.c (1.1.2.6), "Exp", lines: +9 -6 crypto/evp/c_allc.c (1.8.2.3), "Exp", lines: +1 -0 crypto/evp/evp_test.c (1.14.2.11), "Exp", lines: +17 -8 crypto/evp/evptests.txt (1.9.2.2), "Exp", lines: +48 -1 Working CFB1 and test vectors. 2003-07-29 15:24 ben Changed: crypto/evp/e_aes.c (1.6.2.6), "Exp", lines: +14 -0 crypto/objects/obj_dat.h (1.49.2.14), "Exp", lines: +15 -5 crypto/objects/obj_mac.h (1.19.2.14), "Exp", lines: +10 -0 crypto/objects/obj_mac.num (1.15.2.10), "Exp", lines: +2 -0 crypto/objects/objects.txt (1.20.2.15), "Exp", lines: +2 -0 fips/aes/Makefile.ssl (1.1.2.3), "Exp", lines: +1 -1 fips/aes/fips_aesavs.c (1.1.2.4), "Exp", lines: +34 -19 The rest of the keysizes for CFB1, working AES AVS test for CFB1. 2003-07-29 19:05 ben Changed: crypto/aes/aes.h (1.1.2.7), "Exp", lines: +3 -0 crypto/aes/aes_cfb.c (1.1.2.7), "Exp", lines: +14 -0 crypto/evp/c_allc.c (1.8.2.4), "Exp", lines: +1 -0 crypto/evp/e_aes.c (1.6.2.7), "Exp", lines: +4 -9 crypto/evp/evptests.txt (1.9.2.3), "Exp", lines: +48 -0 crypto/objects/obj_dat.h (1.49.2.15), "Exp", lines: +20 -5 crypto/objects/obj_mac.h (1.19.2.15), "Exp", lines: +15 -0 crypto/objects/obj_mac.num (1.15.2.11), "Exp", lines: +3 -0 crypto/objects/objects.txt (1.20.2.16), "Exp", lines: +3 -0 fips/aes/fips_aesavs.c (1.1.2.7), "Exp", lines: +11 -0 AES CFB8. 2003-07-30 20:30 ben Changed: Makefile.org (1.154.2.70), "Exp", lines: +16 -5 crypto/des/cfb_enc.c (1.7.2.1), "Exp", lines: +2 -1 crypto/des/des_enc.c (1.11.2.2), "Exp", lines: +4 -0 crypto/evp/e_aes.c (1.6.2.8), "Exp", lines: +7 -14 crypto/evp/e_des.c (1.5.2.3), "Exp", lines: +37 -1 crypto/evp/evp.h (1.86.2.12), "Exp", lines: +6 -0 crypto/evp/evp_locl.h (1.7.2.4), "Exp", lines: +9 -0 crypto/objects/obj_dat.h (1.49.2.16), "Exp", lines: +48 -23 crypto/objects/obj_mac.h (1.19.2.16), "Exp", lines: +31 -6 crypto/objects/obj_mac.num (1.15.2.12), "Exp", lines: +5 -0 crypto/objects/objects.txt (1.20.2.17), "Exp", lines: +12 -6 fips/Makefile.ssl (1.1.2.4), "Exp", lines: +8 -1 fips/fips_make_sha1 (1.1.2.3), "Exp", lines: +3 -0 fips/aes/Makefile.ssl (1.1.2.4), "Exp", lines: +1 -1 fips/des/.cvsignore (1.1.2.1), "Exp", lines: +3 -0 fips/des/Makefile.ssl (1.1.2.1), "Exp", lines: +96 -0 fips/des/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0 fips/des/fips_des_enc.c (1.1.2.1), "Exp", lines: +288 -0 fips/des/fips_des_locl.h (1.1.2.1), "Exp", lines: +428 -0 fips/des/fips_desmovs.c (1.1.2.1), "Exp", lines: +659 -0 Whoops, forgot FIPS DES, also add EVPs for DES CFB1 and 8. 2003-07-31 23:30 levitte Changed: Makefile.org (1.154.2.71), "Exp", lines: +2 -0 If FDIRS is to be treated like SDIRS, let's not forget to initialize it in Makefile.org. 2003-08-01 12:25 ben Changed: crypto/des/cfb_enc.c (1.7.2.2), "Exp", lines: +45 -36 crypto/evp/c_allc.c (1.8.2.5), "Exp", lines: +2 -0 crypto/evp/e_des.c (1.5.2.4), "Exp", lines: +8 -3 crypto/evp/evptests.txt (1.9.2.4), "Exp", lines: +6 -0 Fix DES CFB-r. 2003-08-01 12:31 ben Changed: crypto/evp/evptests.txt (1.9.2.5), "Exp", lines: +4 -0 DES CFB8 test. 2004-01-21 10:58 appro Changed: Configure (1.314.2.89), "Exp", lines: +1 -0 config (1.95.2.27), "Exp", lines: +7 -6 crypto/bn/Makefile.ssl (1.65.2.7), "Exp", lines: +3 -0 Proper support for HP-UX64 gcc build. PR: 772 2004-03-17 05:01 mark Changed: CHANGES (1.977.2.128), "Exp", lines: +9 -1 FAQ (1.61.2.30), "Exp", lines: +1 -1 LICENSE (1.7.2.3), "Exp", lines: +1 -1 NEWS (1.39.2.21), "Exp", lines: +8 -0 README (1.39.2.24), "Exp", lines: +2 -2 STATUS (1.211.2.41), "Exp", lines: +4 -1 openssl.spec (1.6.2.6), "Exp", lines: +1 -1 crypto/opensslv.h (1.40.2.21), "Exp", lines: +2 -2 ssl/s3_pkt.c (1.46.2.6), "Exp", lines: +8 -0 ssl/s3_srvr.c (1.85.2.20), "Exp", lines: +16 -0 Fix null-pointer assignment in do_change_cipher_spec() revealed by using the Codenomicon TLS Test Tool (CAN-2004-0079) Fix flaw in SSL/TLS handshaking when using Kerberos ciphersuites (CAN-2004-0112) Ready for 0.9.7d build Submitted by: Steven Henson Reviewed by: Joe Orton Approved by: Mark Cox 2004-05-12 16:11 ben Changed: crypto/rand/rand.h (1.26.2.8), "Exp", lines: +2 -0 crypto/rand/rand_err.c (1.6.2.4), "Exp", lines: +2 -0 fips/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1 fips/fips.c (1.1.2.4), "Exp", lines: +5 -1 fips/rand/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1 fips/rand/fips_rand.c (1.1.2.5), "Exp", lines: +29 -0 Blow up in people's faces if they don't reseed. 2004-06-19 15:32 ben Changed: Makefile.org (1.154.2.81), "Exp", lines: +2 -7 Make make tags make tags. 2004-06-21 20:05 levitte Changed: Makefile.org (1.154.2.82), "Exp", lines: +3 -1 Standard sh doesn't tolerate ! as part of the conditional command. PR: 900 2004-07-24 15:40 appro Changed: ssl/ssl_cert.c (1.48.2.9), "Exp", lines: +5 -2 Add casts where casts due. It's "safe" to cast, because "wrong" casts will either be optimized away or never performed. The trouble is that compiler first parses code, then optimizes, not both at once... 2004-08-02 16:15 levitte [FIPS] Changed: crypto/cryptlib.c (1.32.2.13), "Exp", lines: +4 -4 Let's lock a write lock when changing values, shall we? Thanks to Dr Stephen Henson for making me aware of this error. 2004-12-09 19:00 appro Changed: apps/openssl.c (1.48.2.11), "Exp", lines: +1 -1 Eliminate dependency on UNICODE macro. 2004-12-20 14:18 appro Changed: util/mklink.pl (1.6.2.2), "Exp", lines: +1 -0 When re-linking files, really relink them. In other words, emulate ln -f. 2004-12-28 00:48 appro Changed: Configure (1.314.2.103), "Exp", lines: +1 -2 Makefile.org (1.154.2.92), "Exp", lines: +2 -2 Cosmetic mingw update. PR: 924 2005-01-09 18:58 appro Changed: crypto/evp/c_alld.c (1.4.2.1), "Exp", lines: +1 -1 crypto/evp/m_sha.c (1.8.2.1), "Exp", lines: +1 -1 crypto/sha/shatest.c (1.11.2.2), "Exp", lines: +2 -2 Allow for ./config no-sha0. PR: 993 2005-02-03 12:09 appro Changed: Configure (1.314.2.105), "Exp", lines: +2 -2 Makefile.org (1.154.2.94), "Exp", lines: +16 -6 TABLE (1.99.2.44), "Exp", lines: +2 -2 Final HP-UX specific touches to "cope with run-time linker on multi-ABI platforms." 2005-03-12 10:28 appro Changed: Makefile.org (1.154.2.95), "Exp", lines: +9 -2 apps/Makefile (1.1.4.13), "Exp", lines: +0 -1 test/Makefile (1.1.4.9), "Exp", lines: +0 -1 Move copying of .dll to apps/ and test/ to more appropriate place. 2005-03-12 13:15 appro Changed: apps/Makefile (1.1.4.14), "Exp", lines: +4 -2 test/Makefile (1.1.4.10), "Exp", lines: +42 -194 Fold rules in test/Makefile and provide hooks for updated FIPS build procedures. 2005-03-15 10:46 appro Changed: Makefile.org (1.154.2.96), "Exp", lines: +1 -1 crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3 fips/Makefile (1.1.4.8), "Exp", lines: +4 -1 Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this in crypto/Makefile and make Makefile.org and fips/Makefile more discreet. 2005-03-26 20:32 appro Changed: crypto/perlasm/x86nasm.pl (1.2.8.8), "Exp", lines: +6 -1 Resolve "operation size not specified" in NASM modules. 2005-04-03 21:16 appro Changed: Configure (1.314.2.109), "Exp", lines: +10 -0 TABLE (1.99.2.48), "Exp", lines: +50 -0 config (1.95.2.33), "Exp", lines: +9 -2 crypto/bn/Makefile (1.1.4.4), "Exp", lines: +1 -0 crypto/rc4/Makefile (1.1.4.6), "Exp", lines: +1 -1 Extend Solaris x86 support to amd64. Note that if both gcc and Sun C are installed, it defaults to gcc, because it beats Sun C on every benchmark. Also note that gcc shared build was verified to work woth Sun C... 2005-04-14 00:47 appro Changed: Makefile.org (1.154.2.98), "Exp", lines: +1 -1 Move cygcrypto.dll above cygwin.dll. 2005-04-19 16:21 appro Changed: Configure (1.314.2.117), "Exp", lines: +24 -21 Makefile.org (1.154.2.100), "Exp", lines: +1 -11 TABLE (1.99.2.52), "Exp", lines: +20 -20 apps/Makefile (1.1.4.15), "Exp", lines: +1 -1 test/Makefile (1.1.4.12), "Exp", lines: +1 -1 Enable shared link on HP-UX.