Don't try to use unvalidated composite ciphers in FIPS mode
[openssl.git] / CHANGES
2011-03-09 Dr. Stephen HensonAdd ECDH to validated module.
2011-03-08 Dr. Stephen HensonNew initial DH algorithm test driver.
2011-03-04 Dr. Stephen HensonInitial, provisional, subject to wholesale change,...
2011-02-21 Dr. Stephen HensonMake fipscanisteronly build only required files.
2011-02-17 Dr. Stephen HensonMake -DOPENSSL_FIPSSYMS work for assembly language...
2011-02-16 Dr. Stephen HensonExperimental FIPS symbol renaming.
2011-02-15 Dr. Stephen HensonAdd non-FIPS algorithm blocking and selftest checking.
2011-02-14 Dr. Stephen HensonAdd ECDSA functionality to fips module. Initial very...
2011-02-12 Dr. Stephen HensonNew option to disable characteristic two fields in...
2011-02-11 Dr. Stephen HensonNew "fispcanisteronly" build option: only build fipscan...
2011-02-09 Dr. Stephen HensonAdd GCM IV generator. Add some FIPS restrictions to...
2011-02-08 Bodo MöllerSync with 1.0.1 branch.
2011-02-07 Dr. Stephen HensonInitial *very* experimental EVP support for AES-GCM...
2011-02-07 Dr. Stephen HensonUse 0 not -1 (since type is size_t) for finalisation...
2011-02-07 Dr. Stephen HensonNew flags EVP_CIPH_FLAG_CUSTOM_CIPHER in cipher structu...
2011-02-03 Bodo Möllerfix omissions
2011-02-03 Bodo MöllerCVE-2010-4180 fix (from OpenSSL_1_0_0-stable)
2011-01-03 Dr. Stephen HensonFix escaping code for string printing. If *any* escapin...
2010-12-25 Dr. Stephen Hensonavoid verification loops in trusted store when path...
2010-11-29 Dr. Stephen Hensonapply J-PKAKE fix to HEAD (original by Ben)
2010-11-24 Dr. Stephen Hensonadd "missing" functions to copy EVP_PKEY_METHOD and...
2010-11-16 Dr. Stephen Hensonbring HEAD up to date, add CVE-2010-3864 fix, update...
2010-10-10 Dr. Stephen Hensonmove CHANGES entry to correct place
2010-10-10 Dr. Stephen HensonPR: 2314
2010-10-03 Dr. Stephen HensonAdd call to ENGINE_register_all_complete() to ENGINE_lo...
2010-08-26 Bodo MöllerUpdate version numbers
2010-08-26 Bodo MöllerFor better forward-security support, add functions
2010-08-26 Bodo MöllerNew 64-bit optimized implementation EC_GFp_nistp224_met...
2010-08-26 Dr. Stephen HensonPR: 1833
2010-08-26 Bodo MöllerECC library bugfixes.
2010-08-26 Bodo MöllerHarmonize with OpenSSL_1_0_1-stable version of CHANGES.
2010-07-28 Ben LaurieAdd Next Protocol Negotiation.
2010-07-26 Dr. Stephen HensonAdd new type ossl_ssize_t instead of ssize_t and move...
2010-07-24 Dr. Stephen HensonFix WIN32 build system to correctly link ENGINE DLLs...
2010-07-21 Dr. Stephen HensonAdd call to ENGINE_register_all_complete() to ENGINE_lo...
2010-07-18 Dr. Stephen HensonPR: 1830
2010-07-18 Dr. Stephen Hensonoops, revert wrong patch..
2010-07-18 Dr. Stephen HensonFix warnings (From HEAD, original patch by Ben).
2010-06-01 Dr. Stephen Hensonadd CVE-2010-0742 and CVS-2010-1633 fixes
2010-05-05 Andy PolyakovRevert previous Linux-specific/centric commit#19629...
2010-05-05 Ben LaurieNon-executable stack in asm.
2010-04-15 Dr. Stephen Hensonnew function to diff tm structures
2010-04-07 Dr. Stephen HensonAdd SHA2 algorithms to SSL_library_init(). Although...
2010-03-25 Bodo MöllerFix for "Record of death" vulnerability CVE-2010-0740.
2010-03-14 Dr. Stephen Hensonupdate CHANGES
2010-03-14 Dr. Stephen Hensonadd -sigopt option to ca utility
2010-03-12 Mark J. CoxThis entry was in 0.9.8m changelog but missing from...
2010-03-11 Dr. Stephen Hensontypo
2010-03-11 Dr. Stephen HensonRSA PSS ASN1 signing method
2010-03-11 Dr. Stephen HensonAlgorithm specific ASN1 signing functions.
2010-03-08 Dr. Stephen HensonRSA PSS verification support including certificates...
2010-03-06 Dr. Stephen HensonAdd PSS algorithm printing. This is an initial step...
2010-03-06 Dr. Stephen HensonAdd algorithm specific signature printing. An individua...
2010-03-03 Dr. Stephen HensonSubmitted by: Tomas Hoger <thoger@redhat.com>
2010-02-26 Dr. Stephen Hensonoops, use correct date
2010-02-25 Dr. Stephen Hensonadd -trusted_first option and verify flag
2010-02-25 Dr. Stephen HensonExperimental support for partial chain verification...
2010-02-19 Bodo MöllerFix X509_STORE locking
2010-02-17 Dr. Stephen HensonAllow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT...
2010-02-17 Dr. Stephen HensonPR: 2100
2010-02-12 Dr. Stephen Hensonupdate references to new RI RFC
2010-02-08 Dr. Stephen HensonMake CMAC API similar to HMAC API. Add methods for...
2010-02-07 Dr. Stephen HensonInitial experimental CMAC implementation.
2010-02-07 Dr. Stephen HensonAdd missing function EVP_CIPHER_CTX_copy(). Current...
2010-01-29 Dr. Stephen Hensontypo
2010-01-28 Dr. Stephen HensonExperimental renegotiation support in s_server test...
2010-01-27 Dr. Stephen Hensontypo
2010-01-26 Dr. Stephen HensonPR: 1949
2010-01-26 Dr. Stephen HensonTypo
2010-01-22 Dr. Stephen HensonTolerate PKCS#8 DSA format with negative private key.
2010-01-13 Dr. Stephen HensonFix version handling so it can cope with a major versio...
2010-01-13 Dr. Stephen HensonModify compression code so it avoids using ex_data...
2010-01-12 Dr. Stephen HensonPR: 2136
2010-01-06 Dr. Stephen HensonUpdates to conform with draft-ietf-tls-renegotiation...
2009-12-31 Dr. Stephen HensonCompression handling on session resume was badly broken...
2009-12-31 Dr. Stephen HensonInclude CHANGES entry for external cache
2009-12-22 Bodo MöllerConstify crypto/cast.
2009-12-16 Dr. Stephen HensonNew option to enable/disable connection to unpatched...
2009-12-09 Dr. Stephen HensonAdd ctrls to clear options and mode.
2009-12-08 Dr. Stephen HensonSend no_renegotiation alert as required by spec.
2009-12-08 Dr. Stephen HensonAdd ctrl and macro so we can determine if peer support...
2009-12-08 Dr. Stephen HensonAdd support for magic cipher suite value (MCSV). Make...
2009-12-07 Dr. Stephen HensonInitial experimental TLSv1.1 support
2009-12-02 Dr. Stephen HensonUpdate CHANGES.
2009-11-26 Dr. Stephen HensonExperimental CMS password based recipient Info support.
2009-11-26 Bodo MöllerMake CHANGES in CVS head consistent with the CHANGES...
2009-11-25 Dr. Stephen HensonSplit PBES2 into cipher and PBKDF2 versions. This tidie...
2009-11-09 Dr. Stephen HensonFirst cut of renegotiation extension. (port to HEAD)
2009-11-09 Dr. Stephen Hensonupdate CHANGES
2009-10-31 Dr. Stephen HensonAdd option to allow in-band CRL loading in verify utili...
2009-10-30 Dr. Stephen HensonMove CHANGES entry to 0.9.8l section
2009-10-30 Dr. Stephen HensonFix statless session resumption so it can coexist with SNI
2009-09-30 Dr. Stephen HensonPR: 2064, 728
2009-09-23 Dr. Stephen HensonAudit libcrypto for unchecked return values: fix all...
2009-09-23 Dr. Stephen HensonAdd attribute to check if return value of certain funct...
2009-09-13 Dr. Stephen HensonSubmitted by: Julia Lawall <julia@diku.dk>
2009-09-09 Dr. Stephen HensonAdd new option --strict-warnings to Configure script...
2009-09-02 Dr. Stephen HensonTidy up and fix verify callbacks to avoid structure...
2009-08-10 Dr. Stephen HensonPR: 2003
2009-08-06 Dr. Stephen HensonReject leading 0x80 in OID subidentifiers.
next