Extend all the loading functions to take an engine pointer, a pass

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index a3292d244d8b2c75698407c39aaab63f221ddeac..ccc991b959070306a15dace9d7183cb245787eec 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -11,6 +11,22 @@
          *) applies to 0.9.6a (/0.9.6b) and 0.9.7
          +) applies to 0.9.7 only
 
+  +) Change the key loading routines for ENGINEs to use the same kind
+     callback (pem_password_cb) as all other routines that need this
+     kind of callback.
+     [Richard Levitte]
+
+  *) Fix for compatibility mode trust settings: ignore trust settings
+     unless some valid trust or reject settings are present.
+     [Steve Henson]
+
+  *) Fix for blowfish EVP: its a variable length cipher.
+     [Steve Henson]
+
+  +) Increase ENTROPY_NEEDED to 32 bytes, as Rijndael can operate with
+     256 bit (=32 byte) keys. Of course seeding with more entropy bytes
+     than this minimum value is recommended.
+     [Lutz Jaenicke]
 
   +) New random seeder for OpenVMS, using the system process statistics
      that are easily reachable.
@@ -94,7 +110,7 @@
      ENGINE structure.
      [Geoff]
 
-  +) Fix various bugs related to DSA S/MIME verification. Handle missing
+  *) Fix various bugs related to DSA S/MIME verification. Handle missing
      parameters in DSA public key structures and return an error in the
      DSA routines if parameters are absent.
      [Steve Henson]