NEWS revision 55714
155714Skris 255714Skris NEWS 355714Skris ==== 455714Skris 555714Skris This file gives a brief overview of the major changes between each OpenSSL 655714Skris release. For more details please read the CHANGES file. 755714Skris 855714Skris Major changes between OpenSSL 0.9.3 and OpenSSL 0.9.4: 955714Skris 1055714Skris o Transparent support for PKCS#8 format private keys: these are used 1155714Skris by several software packages and are more secure than the standard 1255714Skris form 1355714Skris o PKCS#5 v2.0 implementation 1455714Skris o Password callbacks have a new void * argument for application data 1555714Skris o Avoid various memory leaks 1655714Skris o New pipe-like BIO that allows using the SSL library when actual I/O 1755714Skris must be handled by the application (BIO pair) 1855714Skris 1955714Skris Major changes between OpenSSL 0.9.2b and OpenSSL 0.9.3: 2055714Skris o Lots of enhancements and cleanups to the Configuration mechanism 2155714Skris o RSA OEAP related fixes 2255714Skris o Added `openssl ca -revoke' option for revoking a certificate 2355714Skris o Source cleanups: const correctness, type-safe stacks and ASN.1 SETs 2455714Skris o Source tree cleanups: removed lots of obsolete files 2555714Skris o Thawte SXNet, certificate policies and CRL distribution points 2655714Skris extension support 2755714Skris o Preliminary (experimental) S/MIME support 2855714Skris o Support for ASN.1 UTF8String and VisibleString 2955714Skris o Full integration of PKCS#12 code 3055714Skris o Sparc assembler bignum implementation, optimized hash functions 3155714Skris o Option to disable selected ciphers 3255714Skris 3355714Skris Major changes between OpenSSL 0.9.1c and OpenSSL 0.9.2b: 3455714Skris o Fixed a security hole related to session resumption 3555714Skris o Fixed RSA encryption routines for the p < q case 3655714Skris o "ALL" in cipher lists now means "everything except NULL ciphers" 3755714Skris o Support for Triple-DES CBCM cipher 3855714Skris o Support of Optimal Asymmetric Encryption Padding (OAEP) for RSA 3955714Skris o First support for new TLSv1 ciphers 4055714Skris o Added a few new BIOs (syslog BIO, reliable BIO) 4155714Skris o Extended support for DSA certificate/keys. 4255714Skris o Extended support for Certificate Signing Requests (CSR) 4355714Skris o Initial support for X.509v3 extensions 4455714Skris o Extended support for compression inside the SSL record layer 4555714Skris o Overhauled Win32 builds 4655714Skris o Cleanups and fixes to the Big Number (BN) library 4755714Skris o Support for ASN.1 GeneralizedTime 4855714Skris o Splitted ASN.1 SETs from SEQUENCEs 4955714Skris o ASN1 and PEM support for Netscape Certificate Sequences 5055714Skris o Overhauled Perl interface 5155714Skris o Lots of source tree cleanups. 5255714Skris o Lots of memory leak fixes. 5355714Skris o Lots of bug fixes. 5455714Skris 5555714Skris Major changes between SSLeay 0.9.0b and OpenSSL 0.9.1c: 5655714Skris o Integration of the popular NO_RSA/NO_DSA patches 5755714Skris o Initial support for compression inside the SSL record layer 5855714Skris o Added BIO proxy and filtering functionality 5955714Skris o Extended Big Number (BN) library 6055714Skris o Added RIPE MD160 message digest 6155714Skris o Addeed support for RC2/64bit cipher 6255714Skris o Extended ASN.1 parser routines 6355714Skris o Adjustations of the source tree for CVS 6455714Skris o Support for various new platforms 6555714Skris 66