1 2 NEWS 3 ==== 4 5 This file gives a brief overview of the major changes between each OpenSSL 6 release. For more details please read the CHANGES file. 7
| 1 2 NEWS 3 ==== 4 5 This file gives a brief overview of the major changes between each OpenSSL 6 release. For more details please read the CHANGES file. 7
|
| 8 Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.6a: 9 10 o Security fix: change behavior of OpenSSL to avoid using 11 environment variables when running as root. 12 o Security fix: check the result of RSA-CRT to reduce the 13 possibility of deducing the private key from an incorrectly 14 calculated signature. 15 o Security fix: prevent Bleichenbacher's DSA attack. 16 o Security fix: Zero the premaster secret after deriving the 17 master secret in DH ciphersuites. 18 o Reimplement SSL_peek(), which had various problems. 19 o Compatibility fix: the function des_encrypt() renamed to 20 des_encrypt1() to avoid clashes with some Unixen libc. 21 o Bug fixes for Win32, HP/UX and Irix. 22 o Bug fixes in BIGNUM, SSL, PKCS#7, PKCS#12, X.509, CONF and 23 memory checking routines. 24 o Bug fixes for RSA operations in threaded enviroments. 25 o Bug fixes in misc. openssl applications. 26 o Remove a few potential memory leaks. 27 o Add tighter checks of BIGNUM routines. 28 o Shared library support has been reworked for generality. 29 o More documentation. 30 o New function BN_rand_range(). 31 o Add "-rand" option to openssl s_client and s_server. 32
|
8 Major changes between OpenSSL 0.9.5a and OpenSSL 0.9.6: 9 10 o Some documentation for BIO and SSL libraries. 11 o Enhanced chain verification using key identifiers. 12 o New sign and verify options to 'dgst' application. 13 o Support for DER and PEM encoded messages in 'smime' application. 14 o New 'rsautl' application, low level RSA utility. 15 o MD4 now included.
--- 110 unchanged lines hidden --- | 33 Major changes between OpenSSL 0.9.5a and OpenSSL 0.9.6: 34 35 o Some documentation for BIO and SSL libraries. 36 o Enhanced chain verification using key identifiers. 37 o New sign and verify options to 'dgst' application. 38 o Support for DER and PEM encoded messages in 'smime' application. 39 o New 'rsautl' application, low level RSA utility. 40 o MD4 now included.
--- 110 unchanged lines hidden --- |