Submitted by: Douglas Stebila
Reviewed by: Bodo Moeller

PR: 659

the cipher name in the list is not guaranteed to be at least "buflen"
long.
PR: 567
Submitted by: "Matt Harren" <matth@cs.berkeley.edu>

old OpenSSL releases, but not in new releases)

- bugfix: in ECDH_compute_key, pad x coordinate with leading zeros if necessary

An advisory will be posted to the web.  Expect a release within the hour.

elements directly, so this missing functionality is required.

PR: 276

PR: 358

PR: 364

PR: 287

PR: 477

Notified by Verdon Walker <VWalker@novell.com>

PR: 377

PR: 377

Submitted by: Jeffrey Altman <jaltman@columbia.edu>, "Kenneth R. Robinette" <support@securenetterm.com>

(I wonder why s2_connect() handles the initial buffer allocation slightly
differently...)
PR: 416

Submitted by: "Kenneth R. Robinette" <support@securenetterm.com>
Reviewed by:
PR:

and then didn't support it very well.  And that when there already is a
useful variable for exactly this kind of thing; EX_LIBS...

defined in DECC$TYPES.H.  If _POSIX_C_SOURCE is defined, certain types do
not get defined (u_char, u_int, ...).  DECC.H gets included by assert.h
and others.  Now, in6.h uses the types u_char, u_int and so on, and gets
included as part of other header inclusions, and will of course fail because
of the missing types.

On the other hand, _XOPEN_SOURCE_EXTENDED is needed to get gethostname()
properly declared...

Solution: define _XOPEN_SOURCE_EXTENDED much later, so DECC$TYPES.H has
a chance to be included *first*, so the otherwise missing types get defined
properly.

Personal: *mumble* *mumble*

PR: 373

key-generation and prime-checking functions. Rather than explicitly passing
callback functions and caller-defined context data for the callbacks, a new
structure BN_GENCB is defined that encapsulates this; a pointer to the
structure is passed to all such functions instead.

This wrapper structure allows the encapsulation of "old" and "new" style
callbacks - "new" callbacks return a boolean result on the understanding
that returning FALSE should terminate keygen/primality processing.  The
BN_GENCB abstraction will allow future callback modifications without
needing to break binary compatibility nor change the API function
prototypes. The new API functions have been given names ending in "_ex" and
the old functions are implemented as wrappers to the new ones.  The
OPENSSL_NO_DEPRECATED symbol has been introduced so that, if defined,
declaration of the older functions will be skipped. NB: Some
openssl-internal code will stick with the older callbacks for now, so
appropriate "#undef" logic will be put in place - this is in case the user
is *building* openssl (rather than *including* its headers) with this
symbol defined.

There is another change in the new _ex functions; the key-generation
functions do not return key structures but operate on structures passed by
the caller, the return value is a boolean. This will allow for a smoother
transition to having key-generation as "virtual function" in the various
***_METHOD tables.

ZLIB a known compression method, with the identity 1.

PR: 379

gets defined).
PR: 371

I *think* I got them all covered by now, bu please, if you find any more,
tell me and I'll correct it.
PR: 343

always give the expected result on some platforms.

I've covered all the memset()s I felt safe modifying, but may have missed some.

PR: 349

caching (#288): now internal caching failed (#351):
Make sure, that cipher_id is set before comparing.
Submitted by:
Reviewed by:
PR: 288 (and 351)