Add a few items I intend to work on for 0.9.8 and on.

[openssl.git] / STATUS

diff --git a/STATUS b/STATUS
index baafbd40ab098266e48d5becfad37d4aa97744f0..e6c416d1a3cb7293c3f0dac45f3c50fc89cedb10 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -1,10 +1,21 @@
 
   OpenSSL STATUS                           Last modified at
-  ______________                           $Date: 2002/04/25 07:46:35 $
+  ______________                           $Date: 2002/12/07 20:02:20 $
 
   DEVELOPMENT STATE
 
-    o  OpenSSL 0.9.7:  Under development...
+    o  OpenSSL 0.9.8:  Under development...
+    o  OpenSSL 0.9.7-beta5: Released on December  5th, 2002
+    o  OpenSSL 0.9.7-beta4: Released on November 19th, 2002
+       Debian GNU/Linux (kernel version 2.4.19, gcc 2.95.4)    - PASSED
+    o  OpenSSL 0.9.7-beta3: Released on July     30th, 2002
+    o  OpenSSL 0.9.7-beta2: Released on June     16th, 2002
+    o  OpenSSL 0.9.7-beta1: Released on June      1st, 2002
+    o  OpenSSL 0.9.6h: Released on December   5th, 2002
+    o  OpenSSL 0.9.6g: Released on August     9th, 2002
+    o  OpenSSL 0.9.6f: Released on August     8th, 2002
+    o  OpenSSL 0.9.6e: Released on July      30th, 2002
+    o  OpenSSL 0.9.6d: Released on May        9th, 2002
     o  OpenSSL 0.9.6c: Released on December  21st, 2001
     o  OpenSSL 0.9.6b: Released on July       9th, 2001
     o  OpenSSL 0.9.6a: Released on April      5th, 2001
@@ -17,23 +28,24 @@
     o  OpenSSL 0.9.2b: Released on March     22th, 1999
     o  OpenSSL 0.9.1c: Released on December  23th, 1998
 
+  [See also http://www.openssl.org/support/rt2.html]
+
   RELEASE SHOWSTOPPERS
 
-    o BIGNUM library failures on 64-bit platforms (0.9.7-dev):
-      - BN_mod_mul verificiation (bc) fails for solaris64-sparcv9-cc
-        and other 64-bit platforms
+    o BN_mod_mul verification fails for mips3-sgi-irix
+      unless configured with no-asm
+
+    o [2002-11-21]
+      PR 343 mentions that scrubbing memory with 'memset(ptr, 0, n)' may
+      be optimized away in modern compilers.  This is definitely not good
+      and needs to be fixed immediately.  The formula to use is presented
+      in:
 
-       Checked on                      Result
-       alpha-cc (Tru64 version 4.0)    works
-       linux-alpha+bwx-gcc             doesn't work. Reported by
-                                       Sean O'Riordain <seanpor@acm.org>
-       OpenBSD-sparc64                 doesn't work.  BN_mod_mul breaks.
+      http://online.securityfocus.com/archive/82/297918/2002-10-27/2002-11-02/0
 
-       Needs checked on
-       [add platforms here]
+      The problem report that mentions this is:
 
-      - BN_mod_mul verification fails for mips3-sgi-irix
-        unless configured with no-asm
+      https://www.aet.TU-Cottbus.DE/rt2/Ticket/Display.html?id=343
 
   AVAILABLE PATCHES
 
@@ -56,17 +68,16 @@
        UTIL (a new set of library functions to support some higher level
              functionality that is currently missing).
        Shared library support for VMS.
-       Kerberos 5 authentication
+       Kerberos 5 authentication (Heimdal)
        Constification
-       OCSP
+       Attribute Certificate support
+       Certificate Pair support
+       Storage Engines (primarly an LDAP storage engine)
 
   NEEDS PATCH
 
-    o  parameters should be omitted (not NULL) with id-dsa-with-sha1 OID
-       in X.509 signatures
-
-    o  inappropriate AlgorithmIdentifier used in S/MIME signatures
-       (key type instead of signature algorithm)
+    o  0.9.8-dev: COMPLEMENTOFALL and COMPLEMENTOFDEFAULT do not
+       handle ECCdraft cipher suites correctly.
 
     o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file