Workarounds to make broken programs happy (such as s_client and s_server).

[openssl.git] / STATUS

diff --git a/STATUS b/STATUS
index f017c89adbadc6c9773fbff4f8c4fcafdbf5488f..9172360c9d016723245a1471bcd20df9706a566b 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -1,10 +1,13 @@
 
   OpenSSL STATUS                           Last modified at
 
   OpenSSL STATUS                           Last modified at

-  ______________                           $Date: 1999/05/30 23:54:52 $
+  ______________                           $Date: 2000/02/14 16:58:40 $

 
   DEVELOPMENT STATE
 
 
   DEVELOPMENT STATE
 

-    o  OpenSSL 0.9.4:  Under development...
+    o  OpenSSL 0.9.5:  Under development...
+                       Proposed freeze  time: Monday, February 21st 2000
+                       Proposed release time: Monday, February 28th 2000
+    o  OpenSSL 0.9.4:  Released on August   09th, 1999

     o  OpenSSL 0.9.3a: Released on May      29th, 1999
     o  OpenSSL 0.9.3:  Released on May      25th, 1999
     o  OpenSSL 0.9.2b: Released on March    22th, 1999
     o  OpenSSL 0.9.3a: Released on May      29th, 1999
     o  OpenSSL 0.9.3:  Released on May      25th, 1999
     o  OpenSSL 0.9.2b: Released on March    22th, 1999


@@ -12,21 +15,22 @@
 
   RELEASE SHOWSTOPPERS
 
 
   RELEASE SHOWSTOPPERS
 

-    o
-

   AVAILABLE PATCHES
 
   AVAILABLE PATCHES
 

-    o OCSP (titchenert@certco.com) 
+    o shared libraries <behnke@trustcenter.de>

     o getenv in ca.c and x509_def.c (jaltman@watsun.cc.columbia.edu)
     o getenv in ca.c and x509_def.c (jaltman@watsun.cc.columbia.edu)

+    o SMIME tool (demo), Sampo Kellomaki <sampo@iki.fi>
+    o CA.pl patch (Damien Miller)
+    o FreeBSD 3.0 changes (Richard Levitte)

 
   IN PROGRESS
 
     o Steve is currently working on (in no particular order):
         Proper (or at least usable) certificate chain verification.
 
   IN PROGRESS
 
     o Steve is currently working on (in no particular order):
         Proper (or at least usable) certificate chain verification.

-        Documentation on X509 V3 extension code.
-       PKCS #8 and PKCS#5 v2.0 support.

        Private key, certificate and CRL API and implementation.
        Private key, certificate and CRL API and implementation.

-       Checking and bugfixing PKCS#7 (S/MIME code).
+       Developing and bugfixing PKCS#7 (S/MIME code).
+        Various X509 issues: character sets, certificate request extensions.
+       Documentation for the openssl utility.

 
     o Mark is currently working on:
         Folding in any changes that are in the C2Net code base that were
 
     o Mark is currently working on:
         Folding in any changes that are in the C2Net code base that were


@@ -58,15 +62,16 @@
 
   NEEDS PATCH
 
 
   NEEDS PATCH
 

-    o  broken demos

     o  salzr@certco.com (Rich Salz): Bug in X509_name_print
        <29E0A6D39ABED111A36000A0C99609CA2C2BA4@macertco-srv1.ma.certco.com>
     o  $(PERL) in */Makefile.ssl
     o  "Sign the certificate?" - "n" creates empty certificate file
     o  salzr@certco.com (Rich Salz): Bug in X509_name_print
        <29E0A6D39ABED111A36000A0C99609CA2C2BA4@macertco-srv1.ma.certco.com>
     o  $(PERL) in */Makefile.ssl
     o  "Sign the certificate?" - "n" creates empty certificate file

-    o  dubious declaration of crypt() in des.h

 
   OPEN ISSUES
 
 
   OPEN ISSUES
 

+    o internal_verify doesn't know about X509.v3 (basicConstraints
+      CA flag ...)
+

     o  The Makefile hierarchy and build mechanism is still not a round thing:
 
        1. The config vs. Configure scripts
     o  The Makefile hierarchy and build mechanism is still not a round thing:
 
        1. The config vs. Configure scripts


@@ -87,6 +92,11 @@
                compiler PIC and linker DSO flags from Apache
                into the OpenSSL Configure script.
 
                compiler PIC and linker DSO flags from Apache
                into the OpenSSL Configure script.
 

+               Ulf: +1 for using GNU autoconf and libtool (but not automake,
+                    which apparently is not flexible enough to generate
+                    libcrypto)
+
+

     o  The perl/ stuff needs a major overhaul. Currently it's
        totally obsolete. Either we clean it up and enhance it to be up-to-date
        with the C code or we also could replace it with the really nice
     o  The perl/ stuff needs a major overhaul. Currently it's
        totally obsolete. Either we clean it up and enhance it to be up-to-date
        with the C code or we also could replace it with the really nice


@@ -120,9 +130,4 @@
 
   WISHES
 
 
   WISHES
 

-    o  Mats Nilsson <mats.nilsson@xware.se>:
-       "Add reference counting to all substructures of X509 etc. For instance,
-       X509_NAME lacks a reference counter, while EVP_PKEY has one.  I'm
-       making COM-wrappers for selected parts of SSLeay for a project of ours,
-       and has found this inconsistency in copy semantics annoying."
-
+    o