Oops, I forgot to add the dependency "TABLE: Configure".

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index f09222f1ca72534d604f37d8f3fdbbc4b76c4a79..b29cb8e09cf6648c12aebcb95c938d927ddc522e 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -5,6 +5,16 @@
 
  Changes between 0.9.3a and 0.9.4
 
+  *) Fix demos/selfsign.c: it used obsolete and deleted functions, changed
+     to use the new extension code.
+     [Steve Henson]
+
+  *) Implement the PEM_read/PEM_write functions in crypto/pem/pem_all.c
+     with macros. This should make it easier to change their form, add extra
+     arguments etc. Fix a few PEM prototypes which didn't have cipher as a
+     constant.
+     [Steve Henson]
+
   *) Add to configuration table a new entry that can specify an alternative
      name for unistd.h (for pre-POSIX systems); we need this for NeXTstep,
      according to Mark Crispin <MRC@Panda.COM>.
@@ -14,10 +24,9 @@
   *) DES CBC did not update the IV. Weird.
      [Ben Laurie]
 #else
-     Look at des.c, cbc3_enc.c etc.: Those rely on that bevaviour of
-     des_cbc_encrypt and copy IVs themselves when they have to.
-     Either all those have to be changed too, or things must stay as they
-     are.
+     des_cbc_encrypt does not update the IV, but des_ncbc_encrypt does.
+     Changing the behaviour of the former might break existing programs --
+     where IV updating is needed, des_ncbc_encrypt can be used.
 #endif
 
   *) When bntest is run from "make test" it drives bc to check its