Fix for AIX.

[openssl.git] / STATUS

diff --git a/STATUS b/STATUS
index f46733f309e25e61f4b4d322b933f852af6bb77c..67ecd83a9820d9009c3fb20a468e18160753bd69 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -1,10 +1,12 @@
 
   OpenSSL STATUS                           Last modified at
 
   OpenSSL STATUS                           Last modified at

-  ______________                           $Date: 2001/04/09 07:15:16 $
+  ______________                           $Date: 2002/02/21 17:23:04 $

 
   DEVELOPMENT STATE
 
     o  OpenSSL 0.9.7:  Under development...
 
   DEVELOPMENT STATE
 
     o  OpenSSL 0.9.7:  Under development...

+    o  OpenSSL 0.9.6c: Released on December  21st, 2001
+    o  OpenSSL 0.9.6b: Released on July       9th, 2001

     o  OpenSSL 0.9.6a: Released on April      5th, 2001
     o  OpenSSL 0.9.6:  Released on September 24th, 2000
     o  OpenSSL 0.9.5a: Released on April      1st, 2000
     o  OpenSSL 0.9.6a: Released on April      5th, 2001
     o  OpenSSL 0.9.6:  Released on September 24th, 2000
     o  OpenSSL 0.9.5a: Released on April      1st, 2000


@@ -17,8 +19,21 @@
 
   RELEASE SHOWSTOPPERS
 
 
   RELEASE SHOWSTOPPERS
 

+    o BIGNUM library failures on 64-bit platforms (0.9.7-dev):
+      - BN_mod_mul verificiation (bc) fails for solaris64-sparcv9-cc
+
+       Checked on                      Result
+       alpha-cc (Tru64 version 4.0)    works
+       linux-alpha+bwx-gcc             doesn't work. Reported by
+                                       Sean O'Riordain <seanpor@acm.org>
+
+       Needs checked on
+       [add platforms here]
+

   AVAILABLE PATCHES
 
   AVAILABLE PATCHES
 

+    o 
+

   IN PROGRESS
 
     o Steve is currently working on (in no particular order):
   IN PROGRESS
 
     o Steve is currently working on (in no particular order):


@@ -32,31 +47,28 @@
     o Geoff and Richard are currently working on:
        ENGINE (the new code that gives hardware support among others).
     o Richard is currently working on:
     o Geoff and Richard are currently working on:
        ENGINE (the new code that gives hardware support among others).
     o Richard is currently working on:

+       UI (User Interface)

        UTIL (a new set of library functions to support some higher level
              functionality that is currently missing).
        Shared library support for VMS.
        UTIL (a new set of library functions to support some higher level
              functionality that is currently missing).
        Shared library support for VMS.

-       OCSP

        Kerberos 5 authentication
        Constification
        Kerberos 5 authentication
        Constification

+       OCSP

 
   NEEDS PATCH
 
 
   NEEDS PATCH
 

-    o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
+    o  An (optional) countermeasure against the predictable-IV CBC
+       weakness in SSL/TLS should be added; see
+       http://www.openssl.org/~bodo/tls-cbc.txt

 
 

-    o  OpenSSL_0_9_6-stable:
-       #include <openssl/e_os.h> in exported header files is illegal since
-       e_os.h is suitable only for library-internal use.
+    o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file

 
     o  Whenever strncpy is used, make sure the resulting string is NULL-terminated
        or an error is reported
 
 
     o  Whenever strncpy is used, make sure the resulting string is NULL-terminated
        or an error is reported
 

-  OPEN ISSUES
+    o  "OpenSSL STATUS" is never up-to-date.

 
 

-    o  crypto/ex_data.c is not really thread-safe and so must be used
-       with care (e.g., extra locking where necessary, or don't call
-       CRYPTO_get_ex_new_index once multiple threads exist).
-       The current API is not suitable for everything that it pretends
-       to offer.
+  OPEN ISSUES

 
     o  The Makefile hierarchy and build mechanism is still not a round thing:
 
 
     o  The Makefile hierarchy and build mechanism is still not a round thing:
 


@@ -100,4 +112,18 @@
 
   WISHES
 
 
   WISHES
 

-    o 
+    o  Add variants of DH_generate_parameters() and BN_generate_prime() [etc?]
+       where the callback function can request that the function be aborted.
+       [Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>]
+
+    o  SRP in TLS.
+       [wished by:
+        Dj <derek@yo.net>, Tom Wu <tom@arcot.com>,
+        Tom Holroyd <tomh@po.crl.go.jp>]
+
+       See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt
+       as well as http://www-cs-students.stanford.edu/~tjw/srp/.
+
+       Tom Holroyd tells us there is a SRP patch for OpenSSH at
+       http://members.tripod.com/professor_tom/archives/, that could
+       be useful.