Commit 95a64aa4 authored by Richard Levitte's avatar Richard Levitte
Browse files

Recent changes from 0.9.7-stable

parent 80be2f48

CHANGES

+28 −2
Original line number Diff line number Diff line
@@ -2,7 +2,23 @@ 
 OpenSSL CHANGES

 _______________



 Changes between 0.9.7b and 0.9.7c  [xx XXX 2003]

 Changes between 0.9.7c and 0.9.7d  [xx XXX XXXX]



  *)



 Changes between 0.9.7b and 0.9.7c  [30 Sep 2003]



  *) Fix various bugs revealed by running the NISCC test suite:



     Stop out of bounds reads in the ASN1 code when presented with

     invalid tags (CAN-2003-0543 and CAN-2003-0544).

     

     Free up ASN1_TYPE correctly if ANY type is invalid (CAN-2003-0545).



     If verify callback ignores invalid public key errors don't try to check

     certificate signature with the NULL public key.



     [Steve Henson]



  *) New -ignore_err option in ocsp application to stop the server

     exiting on the first error in a request.
@@ -1980,7 +1996,17 @@ des-cbc 3624.96k 5258.21k 5530.91k 5624.30k 5628.26k 
  *) Clean old EAY MD5 hack from e_os.h.

     [Richard Levitte]



 Changes between 0.9.6j and 0.9.6k  [xx XXX 2003]

 Changes between 0.9.6j and 0.9.6k  [30 Sep 2003]



  *) Fix various bugs revealed by running the NISCC test suite:



     Stop out of bounds reads in the ASN1 code when presented with

     invalid tags (CAN-2003-0543 and CAN-2003-0544).

     

     If verify callback ignores invalid public key errors don't try to check

     certificate signature with the NULL public key.



     [Steve Henson]



  *) In ssl3_accept() (ssl/s3_srvr.c) only accept a client certificate

     if the server requested one: as stated in TLS 1.0 and SSL 3.0

FAQ

+1 −1
Original line number Diff line number Diff line
@@ -68,7 +68,7 @@ OpenSSL - Frequently Asked Questions 
* Which is the current version of OpenSSL?



The current version is available from <URL: http://www.openssl.org>.

OpenSSL 0.9.7b was released on April 10, 2003.

OpenSSL 0.9.7c was released on September 30, 2003.



In addition to the current stable release, you can also access daily

snapshots of the OpenSSL development version at <URL:

Makefile.org

+3 −1
Original line number Diff line number Diff line
@@ -860,7 +860,7 @@ install: all install_docs 
		fi; \

	done;

	cp openssl.pc $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig

	chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig

	chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig/openssl.pc



install_docs:

	@$(PERL) $(TOP)/util/mkdir-p.pl \
@@ -885,6 +885,7 @@ install_docs: 
			>  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \

		$(PERL) util/extract-names.pl < $$i | \

			grep -v $$filecase "^$$fn\$$" | \

			grep -v "[	]" | \

			(cd $(INSTALL_PREFIX)$(MANDIR)/man$$sec/; \

			 while read n; do \

				$$here/util/point.sh $$fn.$${sec}$(MANSUFFIX) "$$n".$${sec}$(MANSUFFIX); \
@@ -901,6 +902,7 @@ install_docs: 
			>  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \

		$(PERL) util/extract-names.pl < $$i | \

			grep -v $$filecase "^$$fn\$$" | \

			grep -v "[	]" | \

			(cd $(INSTALL_PREFIX)$(MANDIR)/man$$sec/; \

			 while read n; do \

				$$here/util/point.sh $$fn.$${sec}$(MANSUFFIX) "$$n".$${sec}$(MANSUFFIX); \

NEWS

+12 −0
Original line number Diff line number Diff line
@@ -5,6 +5,13 @@ 
  This file gives a brief overview of the major changes between each OpenSSL

  release. For more details please read the CHANGES file.



  Major changes between OpenSSL 0.9.7b and OpenSSL 0.9.7c:



      o Security: fix various ASN1 parsing bugs.

      o New -ignore_err option to OCSP utility.

      o Various interop and bug fixes in S/MIME code.

      o SSL/TLS protocol fix for unrequested client certificates.



  Major changes between OpenSSL 0.9.7a and OpenSSL 0.9.7b:



      o Security: counter the Klima-Pokorny-Rosa extension of
@@ -73,6 +80,11 @@ 
      o SSL/TLS: add callback to retrieve SSL/TLS messages.

      o SSL/TLS: support AES cipher suites (RFC3268).



  Major changes between OpenSSL 0.9.6j and OpenSSL 0.9.6k:



      o Security: fix various ASN1 parsing bugs.

      o SSL/TLS protocol fix for unrequested client certificates.



  Major changes between OpenSSL 0.9.6i and OpenSSL 0.9.6j:



      o Security: counter the Klima-Pokorny-Rosa extension of

README

+1 −1
Original line number Diff line number Diff line 


 OpenSSL 0.9.7c-dev xx XXX 2003

 OpenSSL 0.9.7c 30 Sep 2003



 Copyright (c) 1998-2003 The OpenSSL Project

 Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson