Add generationQualifier OID (proposed by Fiel Cabral).

[openssl.git] / STATUS

diff --git a/STATUS b/STATUS
index 7929c0223177da7bfd9241e8e332ea81a9691087..4939dde11957fa9f2d8ddb35295433013e448aa7 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -1,6 +1,6 @@
 
   OpenSSL STATUS                           Last modified at
-  ______________                           $Date: 2002/02/20 18:03:00 $
+  ______________                           $Date: 2002/04/25 07:52:07 $
 
   DEVELOPMENT STATE
 
@@ -21,15 +21,20 @@
 
     o BIGNUM library failures on 64-bit platforms (0.9.7-dev):
       - BN_mod_mul verificiation (bc) fails for solaris64-sparcv9-cc
+        and other 64-bit platforms
 
        Checked on                      Result
        alpha-cc (Tru64 version 4.0)    works
        linux-alpha+bwx-gcc             doesn't work. Reported by
                                        Sean O'Riordain <seanpor@acm.org>
+       OpenBSD-sparc64                 doesn't work.  BN_mod_mul breaks.
 
        Needs checked on
        [add platforms here]
 
+      - BN_mod_mul verification fails for mips3-sgi-irix
+        unless configured with no-asm
+
   AVAILABLE PATCHES
 
     o 
@@ -57,21 +62,24 @@
 
   NEEDS PATCH
 
-    o  An (optional) countermeasure against the predictable-IV CBC
-       weakness in SSL/TLS should be added; see
-       http://www.openssl.org/~bodo/tls-cbc.txt
+    o  parameters should be omitted (not NULL) with id-dsa-with-sha1 OID
+       in X.509 signatures
 
-    o  'openssl speed' should include AES support (0.9.7-dev)
+    o  inappropriate AlgorithmIdentifier used in S/MIME signatures
+       (key type instead of signature algorithm)
 
-    o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
+    o  AES ciphersuites are not (yet) official and should not be enabled
+       unless explicitly requested
 
-    o  Whenever strncpy is used, make sure the resulting string is NULL-terminated
-       or an error is reported
+    o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
 
     o  "OpenSSL STATUS" is never up-to-date.
 
   OPEN ISSUES
 
+    o  Do we want the EVP API changes in 0.9.7?
+       Can compatibility be improved?
+
     o  The Makefile hierarchy and build mechanism is still not a round thing:
 
        1. The config vs. Configure scripts
@@ -96,22 +104,6 @@
                     which apparently is not flexible enough to generate
                     libcrypto)
 
-
-    o  The perl/ stuff needs a major overhaul. Currently it's
-       totally obsolete. Either we clean it up and enhance it to be up-to-date
-       with the C code or we also could replace it with the really nice
-       Net::SSLeay package we can find under
-       http://www.neuronio.pt/SSLeay.pm.html.  Ralf uses this package for a
-       longer time and it works fine and is a nice Perl module. Best would be
-       to convince the author to work for the OpenSSL project and create a
-       Net::OpenSSL or Crypt::OpenSSL package out of it and maintains it for
-       us.
-
-       Status: Ralf thinks we should both contact the author of Net::SSLeay
-               and look how much effort it is to bring Eric's perl/ stuff up
-               to date.
-               Paul +1
-
   WISHES
 
     o  Add variants of DH_generate_parameters() and BN_generate_prime() [etc?]