Prevent KSSL server from requesting a client certificate.

[openssl.git] / STATUS

diff --git a/STATUS b/STATUS
index 9a1214757cf60b5dac09b66d9bb60a9902d255f7..d08c0e0df0b677d8074e3f023c697a848454cb65 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -1,11 +1,11 @@
 
   OpenSSL STATUS                           Last modified at
 
   OpenSSL STATUS                           Last modified at

-  ______________                           $Date: 2001/01/10 16:37:35 $
+  ______________                           $Date: 2001/07/04 20:56:08 $

 
   DEVELOPMENT STATE
 
     o  OpenSSL 0.9.7:  Under development...
 
   DEVELOPMENT STATE
 
     o  OpenSSL 0.9.7:  Under development...

-    o  OpenSSL 0.9.6a: Bugfix release -- under development...
+    o  OpenSSL 0.9.6a: Released on April      5th, 2001

     o  OpenSSL 0.9.6:  Released on September 24th, 2000
     o  OpenSSL 0.9.5a: Released on April      1st, 2000
     o  OpenSSL 0.9.5:  Released on February  28th, 2000
     o  OpenSSL 0.9.6:  Released on September 24th, 2000
     o  OpenSSL 0.9.5a: Released on April      1st, 2000
     o  OpenSSL 0.9.5:  Released on February  28th, 2000


@@ -17,12 +17,8 @@
 
   RELEASE SHOWSTOPPERS
 
 
   RELEASE SHOWSTOPPERS
 

-    o
-

   AVAILABLE PATCHES
 
   AVAILABLE PATCHES
 

-    o CA.pl patch (Damien Miller)
-

   IN PROGRESS
 
     o Steve is currently working on (in no particular order):
   IN PROGRESS
 
     o Steve is currently working on (in no particular order):


@@ -36,19 +32,26 @@
     o Geoff and Richard are currently working on:
        ENGINE (the new code that gives hardware support among others).
     o Richard is currently working on:
     o Geoff and Richard are currently working on:
        ENGINE (the new code that gives hardware support among others).
     o Richard is currently working on:

+       UI (User Interface)

        UTIL (a new set of library functions to support some higher level
              functionality that is currently missing).
        Shared library support for VMS.
        UTIL (a new set of library functions to support some higher level
              functionality that is currently missing).
        Shared library support for VMS.

-       OCSP

        Kerberos 5 authentication
        Constification
        Kerberos 5 authentication
        Constification

+       OCSP

 
   NEEDS PATCH
 
     o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
 
 
   NEEDS PATCH
 
     o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
 

-    o  #include <openssl/e_os.h> in exported header files is illegal since
-       e_os.h is suitable only for library-internal use
+    o  OpenSSL_0_9_6-stable:
+       #include <openssl/e_os.h> in exported header files is illegal since
+       e_os.h is suitable only for library-internal use.
+
+    o  Whenever strncpy is used, make sure the resulting string is NULL-terminated
+       or an error is reported
+
+  OPEN ISSUES

 
     o  crypto/ex_data.c is not really thread-safe and so must be used
        with care (e.g., extra locking where necessary, or don't call
 
     o  crypto/ex_data.c is not really thread-safe and so must be used
        with care (e.g., extra locking where necessary, or don't call


@@ -56,8 +59,6 @@
        The current API is not suitable for everything that it pretends
        to offer.
 
        The current API is not suitable for everything that it pretends
        to offer.
 

-  OPEN ISSUES
-

     o  The Makefile hierarchy and build mechanism is still not a round thing:
 
        1. The config vs. Configure scripts
     o  The Makefile hierarchy and build mechanism is still not a round thing:
 
        1. The config vs. Configure scripts


@@ -100,4 +101,14 @@
 
   WISHES
 
 
   WISHES
 

-    o 
+    o  SRP in TLS.
+       [wished by:
+        Dj <derek@yo.net>, Tom Wu <tom@arcot.com>,
+        Tom Holroyd <tomh@po.crl.go.jp>]
+
+       See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt
+       as well as http://www-cs-students.stanford.edu/~tjw/srp/.
+
+       Tom Holroyd tells us there is a SRP patch for OpenSSH at
+       http://members.tripod.com/professor_tom/archives/, that could
+       be useful.