Workaround MSVC6 compiler bug.

[openssl.git] / ChangeLog.0_9_7-stable_not-in-head_FIPS

diff --git a/ChangeLog.0_9_7-stable_not-in-head_FIPS b/ChangeLog.0_9_7-stable_not-in-head_FIPS
index e948545e681221edeb059a32ed199cad99c8a79c..1e6c88f77abfbf8d9db47184393a9929291e0041 100644 (file)
--- a/ChangeLog.0_9_7-stable_not-in-head_FIPS
+++ b/ChangeLog.0_9_7-stable_not-in-head_FIPS
@@ -141,6 +141,14 @@ This is the "FIPS"-related part.
 
        Missing files.
 
 
        Missing files.
 

+2003-07-31 23:30  levitte
+
+       Changed:
+               Makefile.org (1.154.2.71), "Exp", lines: +2 -0
+
+       If FDIRS is to be treated like SDIRS, let's not forget to
+       initialize it in Makefile.org.
+

 2003-07-31 23:41  levitte
 
        Changed:
 2003-07-31 23:41  levitte
 
        Changed:


@@ -580,6 +588,78 @@ This is the "FIPS"-related part.
 
        Ignore 'Makefile.save'
 
 
        Ignore 'Makefile.save'
 

+2004-05-12 16:11  ben
+
+       Changed:
+               crypto/rand/rand.h (1.26.2.8), "Exp", lines: +2 -0
+               crypto/rand/rand_err.c (1.6.2.4), "Exp", lines: +2 -0
+               fips/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
+               fips/fips.c (1.1.2.4), "Exp", lines: +5 -1
+               fips/rand/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
+               fips/rand/fips_rand.c (1.1.2.5), "Exp", lines: +29 -0
+
+       Blow up in people's faces if they don't reseed.
+
+2004-05-15 19:51  ben
+
+       Changed:
+               crypto/dh/dh.h (1.23.2.6), "Exp", lines: +1 -0
+               crypto/dh/dh_err.c (1.6.2.3), "Exp", lines: +2 -1
+               crypto/dh/dh_gen.c (1.8.8.2), "Exp", lines: +9 -0
+               fips/fips_test_suite.c (1.1.4.2), "Exp", lines: +4 -3
+               fips/aes/fips_aesavs.c (1.1.2.11), "Exp", lines: +49 -1
+               fips/des/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
+               fips/des/fips_desmovs.c (1.1.2.5), "Exp", lines: +49 -1
+               fips/des/fips_set_key.c (1.1.4.2), "Exp", lines: +2 -0
+               fips/sha1/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
+               fips/sha1/fips_md32_common.h (1.1.2.4), "Exp", lines: +3 -0
+               fips/sha1/standalone.sha1 (1.1.2.6), "Exp", lines: +1 -1
+
+       Fix self-tests, ban some things in FIPS mode, fix copyrights.
+
+2004-05-17 06:28  levitte
+
+       Changed:
+               util/mk1mf.pl (1.41.2.11), "Exp", lines: +8 -2
+               util/pl/BC-16.pl (1.2.2.2), "Exp", lines: +9 -4
+               util/pl/BC-32.pl (1.11.2.5), "Exp", lines: +8 -3
+               util/pl/Mingw32.pl (1.12.6.6), "Exp", lines: +7 -2
+               util/pl/OS2-EMX.pl (1.1.2.4), "Exp", lines: +7 -2
+               util/pl/VC-16.pl (1.3.2.2), "Exp", lines: +7 -2
+               util/pl/VC-32.pl (1.11.2.4), "Exp", lines: +7 -2
+               util/pl/VC-CE.pl (1.1.2.6), "Exp", lines: +7 -2
+               util/pl/linux.pl (1.3.6.1), "Exp", lines: +7 -2
+               util/pl/ultrix.pl (1.2.8.2), "Exp", lines: +7 -2
+               util/pl/unix.pl (1.2.8.1), "Exp", lines: +7 -2
+
+       Generate SHA1 files on Windows and other platforms supported by
+       mk1mf.pl, when building in FIPS mode.
+
+               Note: UNTESTED!
+
+2004-05-17 06:30  levitte
+
+       Changed:
+               apps/apps.h (1.44.2.14), "Exp", lines: +3 -0
+               apps/openssl.c (1.48.2.10), "Exp", lines: +9 -5
+
+       Make sure the applications know when we are running in FIPS mode.
+       We can't use the variable in libcrypto, since it's supposedly
+       unknown.
+
+               Note: currently only supported in MONOLITH mode.
+
+2004-05-17 06:31  levitte
+
+       Changed:
+               apps/enc.c (1.35.2.9), "Exp", lines: +10 -1
+
+       When in FIPS mode, use SHA1 to digest the key, rather than MD5, as
+       MD5 isn't a FIPS-approved algorithm.
+
+               Note: this means the user needs to keep track of this, and
+       we need to add support for that...
+

 2004-05-19 16:16  levitte
 
        Changed:
 2004-05-19 16:16  levitte
 
        Changed:


@@ -686,6 +766,15 @@ This is the "FIPS"-related part.
 
                PR: 900
 
 
                PR: 900
 

+2004-06-21 20:05  levitte
+
+       Changed:
+               Makefile.org (1.154.2.82), "Exp", lines: +3 -1
+
+       Standard sh doesn't tolerate ! as part of the conditional command.
+
+               PR: 900
+

 2004-06-28 22:33  levitte
 
        Changed:
 2004-06-28 22:33  levitte
 
        Changed:


@@ -711,6 +800,23 @@ This is the "FIPS"-related part.
        Eliminate enforced -g from CFLAGS. It switches off optimization
        with some compilers, e.g. DEC C.
 
        Eliminate enforced -g from CFLAGS. It switches off optimization
        with some compilers, e.g. DEC C.
 

+2004-07-21 19:41  steve
+
+       Changed:
+               crypto/pem/pem_all.c (1.20.2.1), "Exp", lines: +119 -0
+
+       When in FIPS mode write private keys in PKCS#8 and PBES2 format to
+       avoid use of prohibited MD5 algorithm.
+
+2004-07-23 15:20  ben
+
+       Changed:
+               fips/rand/fingerprint.sha1 (1.1.2.7), "Exp", lines: +1 -1
+               fips/rand/fips_rand.c (1.1.2.7), "Exp", lines: +22 -7
+               fips/rand/fips_randtest.c (1.1.2.5), "Exp", lines: +2 -2
+
+       Convert to X9.31.
+

 2004-07-21 19:35  steve
 
        Changed:
 2004-07-21 19:35  steve
 
        Changed:


@@ -834,6 +940,16 @@ This is the "FIPS"-related part.
        rebuilt to use FIPS functionality will need to be recompiled in any
        case, thus not being a problem either.
 
        rebuilt to use FIPS functionality will need to be recompiled in any
        case, thus not being a problem either.
 

+2004-08-02 16:15  levitte
+
+       Changed:
+               crypto/cryptlib.c (1.32.2.13), "Exp", lines: +4 -4
+
+       Let's lock a write lock when changing values, shall we?
+
+               Thanks to Dr Stephen Henson <shenson@drh-consultancy.co.uk>
+       for making me aware of this error.
+

 2004-08-05 20:11  steve
 
        Changed:
 2004-08-05 20:11  steve
 
        Changed:


@@ -842,6 +958,13 @@ This is the "FIPS"-related part.
 
        Stop compiler giving bogus shadow warning.
 
 
        Stop compiler giving bogus shadow warning.
 

+2004-08-09 14:13  levitte
+
+       Changed:
+               makevms.com (1.35.2.8), "Exp", lines: +1 -1
+
+       In the fips directory, we use FIPS-LIB.COM, not CRYPTO-LIB.COM...
+

 2004-08-09 14:14  levitte
 
        Changed:
 2004-08-09 14:14  levitte
 
        Changed:


@@ -891,6 +1014,22 @@ This is the "FIPS"-related part.
 
        Update fingerprints.
 
 
        Update fingerprints.
 

+2004-10-14 07:51  levitte
+
+       Changed:
+               VMS/mkshared.com (1.3.2.1), "Exp", lines: +8 -0
+
+       We need to check for OPENSSL_FIPS when building shared libraries,
+       so we get correct transfer vectors for those functions when
+       required.
+
+2004-10-26 13:47  steve
+
+       Changed:
+               util/mkfiles.pl (1.12.2.2), "Exp", lines: +1 -0
+
+       Add fips/dh directory to mkfiles.pl
+

 2004-10-26 14:17  levitte
 
        Changed:
 2004-10-26 14:17  levitte
 
        Changed:


@@ -1140,6 +1279,17 @@ This is the "FIPS"-related part.
 
        In FIPS mode use SHA1 as default digest in x509 and req utilities.
 
 
        In FIPS mode use SHA1 as default digest in x509 and req utilities.
 

+2005-03-15 10:46  appro
+
+       Changed:
+               Makefile.org (1.154.2.96), "Exp", lines: +1 -1
+               crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3
+               fips/Makefile (1.1.4.8), "Exp", lines: +4 -1
+
+       Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this
+       in crypto/Makefile and make Makefile.org and fips/Makefile more
+       discreet.
+

 2005-03-22 18:29  steve
 
        Changed:
 2005-03-22 18:29  steve
 
        Changed: