NEWS revision 59191
1 2 NEWS 3 ==== 4 5 This file gives a brief overview of the major changes between each OpenSSL 6 release. For more details please read the CHANGES file. 7 8 Major changes between OpenSSL 0.9.5 and OpenSSL 0.9.5a: 9 10 o Bug fixes for Win32, SuSE Linux, NeXTSTEP and FreeBSD 2.2.8 11 o Shared library support for HPUX and Solaris-gcc 12 o Support of Linux/IA64 13 o Assembler support for Mingw32 14 o New 'rand' application 15 o New way to check for existence of algorithms from scripts 16 17 Major changes between OpenSSL 0.9.4 and OpenSSL 0.9.5: 18 19 o S/MIME support in new 'smime' command 20 o Documentation for the OpenSSL command line application 21 o Automation of 'req' application 22 o Fixes to make s_client, s_server work under Windows 23 o Support for multiple fieldnames in SPKACs 24 o New SPKAC command line utilty and associated library functions 25 o Options to allow passwords to be obtained from various sources 26 o New public key PEM format and options to handle it 27 o Many other fixes and enhancements to command line utilities 28 o Usable certificate chain verification 29 o Certificate purpose checking 30 o Certificate trust settings 31 o Support of authority information access extension 32 o Extensions in certificate requests 33 o Simplified X509 name and attribute routines 34 o Initial (incomplete) support for international character sets 35 o New DH_METHOD, DSA_METHOD and enhanced RSA_METHOD 36 o Read only memory BIOs and simplified creation function 37 o TLS/SSL protocol bugfixes: Accept TLS 'client hello' in SSL 3.0 38 record; allow fragmentation and interleaving of handshake and other 39 data 40 o TLS/SSL code now "tolerates" MS SGC 41 o Work around for Netscape client certificate hang bug 42 o RSA_NULL option that removes RSA patent code but keeps other 43 RSA functionality 44 o Memory leak detection now allows applications to add extra information 45 via a per-thread stack 46 o PRNG robustness improved 47 o EGD support 48 o BIGNUM library bug fixes 49 o Faster DSA parameter generation 50 o Enhanced support for Alpha Linux 51 o Experimental MacOS support 52 53 Major changes between OpenSSL 0.9.3 and OpenSSL 0.9.4: 54 55 o Transparent support for PKCS#8 format private keys: these are used 56 by several software packages and are more secure than the standard 57 form 58 o PKCS#5 v2.0 implementation 59 o Password callbacks have a new void * argument for application data 60 o Avoid various memory leaks 61 o New pipe-like BIO that allows using the SSL library when actual I/O 62 must be handled by the application (BIO pair) 63 64 Major changes between OpenSSL 0.9.2b and OpenSSL 0.9.3: 65 o Lots of enhancements and cleanups to the Configuration mechanism 66 o RSA OEAP related fixes 67 o Added `openssl ca -revoke' option for revoking a certificate 68 o Source cleanups: const correctness, type-safe stacks and ASN.1 SETs 69 o Source tree cleanups: removed lots of obsolete files 70 o Thawte SXNet, certificate policies and CRL distribution points 71 extension support 72 o Preliminary (experimental) S/MIME support 73 o Support for ASN.1 UTF8String and VisibleString 74 o Full integration of PKCS#12 code 75 o Sparc assembler bignum implementation, optimized hash functions 76 o Option to disable selected ciphers 77 78 Major changes between OpenSSL 0.9.1c and OpenSSL 0.9.2b: 79 o Fixed a security hole related to session resumption 80 o Fixed RSA encryption routines for the p < q case 81 o "ALL" in cipher lists now means "everything except NULL ciphers" 82 o Support for Triple-DES CBCM cipher 83 o Support of Optimal Asymmetric Encryption Padding (OAEP) for RSA 84 o First support for new TLSv1 ciphers 85 o Added a few new BIOs (syslog BIO, reliable BIO) 86 o Extended support for DSA certificate/keys. 87 o Extended support for Certificate Signing Requests (CSR) 88 o Initial support for X.509v3 extensions 89 o Extended support for compression inside the SSL record layer 90 o Overhauled Win32 builds 91 o Cleanups and fixes to the Big Number (BN) library 92 o Support for ASN.1 GeneralizedTime 93 o Splitted ASN.1 SETs from SEQUENCEs 94 o ASN1 and PEM support for Netscape Certificate Sequences 95 o Overhauled Perl interface 96 o Lots of source tree cleanups. 97 o Lots of memory leak fixes. 98 o Lots of bug fixes. 99 100 Major changes between SSLeay 0.9.0b and OpenSSL 0.9.1c: 101 o Integration of the popular NO_RSA/NO_DSA patches 102 o Initial support for compression inside the SSL record layer 103 o Added BIO proxy and filtering functionality 104 o Extended Big Number (BN) library 105 o Added RIPE MD160 message digest 106 o Addeed support for RC2/64bit cipher 107 o Extended ASN.1 parser routines 108 o Adjustations of the source tree for CVS 109 o Support for various new platforms 110 111