bug fix.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index ed0156342be0bff7f0b4f10aa71b727b5f1f1564..91f4e56a6072e8ee2ac9a087dfd0d8285cae95d8 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,7 +2,35 @@
  OpenSSL CHANGES
  _______________
 
- Changes between 0.9.5 and 0.9.6  [XX XXX 2000]
+ Changes between 0.9.5 and 0.9.5a  [XX XXX 2000]
+
+  *) Add compatibility options to the purpose and trust code. The
+     purpose X509_PURPOSE_ANY is "any purpose" which automatically
+     accepts a certificate or CA, this was the previous behaviour,
+     with all the associated security issues.
+
+     X509_TRUST_COMPAT is the old trust behaviour: only and
+     automatically trust self signed roots in certificate store. A
+     new trust setting X509_TRUST_DEFAULT is used to specify that
+     a purpose has no associated trust setting and it should instead
+     use the value in the default purpose.
+     [Steve Henson]
+
+  *) Fix the PKCS#8 DSA private key code so it decodes keys again
+     and fix a memory leak.
+     [Steve Henson]
+
+  *) In util/mkerr.pl (which implements 'make errors'), preserve
+     reason strings from the previous version of the .c file, as
+     the default to have only downcase letters (and digits) in
+     automatically generated reasons codes is not always appropriate.
+     [Bodo Moeller]
+
+  *) In ERR_load_ERR_strings(), build an ERR_LIB_SYS error reason table
+     using strerror.  Previously, ERR_reason_error_string() returned
+     library names as reason strings for SYSerr; but SYSerr is a special
+     case where small numbers are errno values, not library numbers.
+     [Bodo Moeller]
 
   *) Add '-dsaparam' option to 'openssl dhparam' application.  This
      converts DSA parameters into DH parameters. (When creating parameters,