Mention modification to Configure.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 7975ac0a155a37903eea79e962c76fbf58358f73..52730c1468d443058f55db5b3ce32d2e7cfe45c8 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,35 @@
 
  Changes between 0.9.3a and 0.9.4
 
+  *) Introduce "mode" for SSL structures (with defaults in SSL_CTX),
+     which largely parallels "options", but is for changing API behaviour,
+     whereas "options" are about protocol behaviour.
+     Initial "mode" flags (still experimental) are:
+
+     SSL_MODE_ENABLE_PARTIAL_WRITE   Allow SSL_write to report success when
+                                     a single record has been written.
+     SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER  Don't insist that SSL_write
+                                     retries use the same buffer location.
+                                     (But all of the contents must be
+                                     copied!)
+     [Bodo Moeller]
+
+  *) Bugfix: SSL_set_mode ignored its parameter, only SSL_CTX_set_mode
+     worked.
+
+  *) Fix problems with no-hmac etc.
+     [Ulf Möller, pointed out by Brian Wellington <bwelling@tislabs.com>]
+
+  *) New functions RSA_get_default_method(), RSA_set_method() and
+     RSA_get_method(). These allows replacement of RSA_METHODs without having
+     to mess around with the internals of an RSA structure.
+     [Steve Henson]
+
+  *) Fix memory leaks in DSA_do_sign and DSA_is_prime.
+     Also really enable memory leak checks in openssl.c and in some
+     test programs.
+     [Chad C. Mulligan, Bodo Moeller]
+
   *) Fix a bug in d2i_ASN1_INTEGER() and i2d_ASN1_INTEGER() which can mess
      up the length of negative integers. This has now been simplified to just
      store the length when it is first determined and use it later, rather
@@ -26,8 +55,9 @@
      [Steve Henson]
 
   *) mk1mf.pl (used by Windows builds) did not properly read the
-     options set by Configure in the top level Makefile; typo fixed,
-     now "no-idea" etc. works as intended.
+     options set by Configure in the top level Makefile, and Configure
+     did not was not even able to write more than one option correctly.
+     Fixed, now "no-idea no-rc5 -DCRYPTO_MDEBUG" etc. works as intended.
      [Bodo Moeller]
 
   *) New functions CONF_load_bio() and CONF_load_fp() to allow a config