This file, together with ChangeLog.0_9_7-stable_not-in-head_FIPS, provides a collection of those CVS change log entries for the 0.9.7 branch (OpenSSL_0_9_7-stable) that do not appear similarly in 0.9.8-dev (CVS head). ChangeLog.0_9_7-stable_not-in-head_FIPS - "FIPS" related changes ChangeLog.0_9_7-stable_not-in-head - everything else Some obvious false positives have been eliminated: e.g., we do not care about a simple "make update"; and we don't care about changes identified to the 0.9.7 branch that were explicitly identified as backports from head. Eliminating all other entries (and finally this file and its compantion), either as false positives or as things that should go into 0.9.8, remains to be done. Any additional changes to 0.9.7 that are not immediately put into 0.9.8, but belong there as well, should be added to the end of this file. 2002-03-01 16:39 ben Changed: Configure (1.314.2.6), "Exp", lines: +1 -0 OpenBSD variant. 2002-10-29 18:46 geoff Changed: doc/ssl/SSL_CTX_set_session_cache_mode.pod (1.5.2.2), "Exp", lines: +1 -0 Correct another inconsistency in my recent commits. 2002-11-04 17:33 levitte Changed: Configure (1.314.2.38), "Exp", lines: +4 -2 Return my normal debug targets to something not so extreme, and make the extreme ones special (or 'extreme', if you will :-)). 2002-12-15 16:27 appro Changed: Makefile.org (1.154.2.41), "Exp", lines: +2 -1 Another Solaris shared build clean-up. This is not actually needed if one uses WorkShop C. It's gcc driver that brings copy of libgcc.a into .so otherwise. In case you wonder what it's -Wl,-z... and not just -z. Problem is that gcc driver apparently omits all -z options but -z text. Don't ask me why. I'm not committing corresponding workaround into the HEAD as Makefile.shared reportedly needs even more work... 2002-12-16 19:17 appro Changed: crypto/bn/bn_lcl.h (1.23.2.3), "Exp", lines: +3 -0 crypto/bn/bn_mul.c (1.28.2.4), "Exp", lines: +84 -445 This is rollback to 0.9.6h bn_mul.c to address problem reported in RT#272. 2002-12-16 19:59 appro Changed: Makefile.org (1.154.2.42), "Exp", lines: +3 -1 Some of Sun compiler drivers (well, one of those I have) collect all options specified with -Wl in the beginnig of the ld command line which kind of obsoletes the idea as it's -z defaultextract that will be closest to lib*.a and not -z allextract:-( 2002-12-17 15:21 levitte Changed: NEWS (1.39.2.16), "Exp", lines: +4 -1 A few more NEWS items. !2002-12-27 17:49 appro ! ! Changed: ! Configure (1.314.2.62), "Exp", lines: +1 -1 ! ! According to Tim Rice assembler support in ! SCO5 never worked anyway. Note this is not going to HEAD as we ! intend to provide an alternative solution as soon as 0.9.7 is out. 2002-12-28 02:35 levitte Changed: Configure (1.314.2.63), "Exp", lines: +1 -1 Hmm, the variables $x96_elf_asm and others contain a number of colons, so when removing one reference, if should be replaced with the appropriate number of colons, or chaos will follow... It's rather silly to believe we'd release 0.9.7a in 2002 :-). 2003-01-01 16:48 ben Changed: crypto/des/des_locl.h (1.19.2.5), "Exp", lines: +1 -1 crypto/rc5/rc5_locl.h (1.3.2.4), "Exp", lines: +1 -1 Fix warnings, use correct -Ds. ? 2003-04-04 16:21 levitte Changed: util/mkdef.pl (1.67.2.5), "Exp", lines: +10 -5 util/mkerr.pl (1.18.2.3), "Exp", lines: +6 -6 Transfer the changes to detect multiline comments and the GCC extension __attribute__. 2003-04-08 13:54 levitte Changed: test/Makefile.ssl (1.84.2.25), "Exp", lines: +29 -1 apps/Makefile.ssl (1.100.2.22), "Exp", lines: +1 -0 Makefile.org (1.154.2.61), "Exp", lines: +4 -5 Set LD_LIBRARY_PATH when linking, since OpenUnix' ld uses it to create a library search path. Correct typos. 2003-07-03 23:43 levitte Changed: Makefile.org (1.154.2.65), "Exp", lines: +2 -2 Add a slash so grep doesn't return both ./crypto/bio/bss_mem.o and ./crypto/mem.o when we're looking for mem.o. 2003-07-27 15:46 ben Changed: crypto/aes/aes.h (1.1.2.5), "Exp", lines: +3 -0 crypto/aes/aes_cfb.c (1.1.2.4), "Exp", lines: +57 -0 Add untested CFB-r mode. Will be tested soon. 2003-07-28 17:07 ben Changed: Makefile.org (1.154.2.69), "Exp", lines: +5 -1 crypto/aes/aes.h (1.1.2.6), "Exp", lines: +3 -0 crypto/aes/aes_cfb.c (1.1.2.5), "Exp", lines: +19 -0 crypto/dsa/Makefile.ssl (1.49.2.6), "Exp", lines: +3 -2 crypto/err/Makefile.ssl (1.48.2.4), "Exp", lines: +17 -16 crypto/evp/e_aes.c (1.6.2.5), "Exp", lines: +8 -0 crypto/evp/e_des.c (1.5.2.2), "Exp", lines: +1 -1 crypto/evp/e_des3.c (1.8.2.3), "Exp", lines: +2 -2 crypto/evp/evp.h (1.86.2.11), "Exp", lines: +28 -11 crypto/evp/evp_locl.h (1.7.2.3), "Exp", lines: +2 -2 crypto/objects/obj_dat.h (1.49.2.13), "Exp", lines: +10 -5 crypto/objects/obj_mac.h (1.19.2.13), "Exp", lines: +5 -0 crypto/objects/obj_mac.num (1.15.2.9), "Exp", lines: +1 -0 crypto/objects/objects.txt (1.20.2.14), "Exp", lines: +4 -0 fips/Makefile.ssl (1.1.2.3), "Exp", lines: +7 -0 fips/aes/Makefile.ssl (1.1.2.2), "Exp", lines: +23 -1 fips/aes/fips_aesavs.c (1.1.2.3), "Exp", lines: +9 -1 test/Makefile.ssl (1.84.2.30), "Exp", lines: +101 -43 Add support for partial CFB modes, make tests work, update dependencies. 2003-07-29 12:56 ben Changed: crypto/aes/aes_cfb.c (1.1.2.6), "Exp", lines: +9 -6 crypto/evp/c_allc.c (1.8.2.3), "Exp", lines: +1 -0 crypto/evp/evp_test.c (1.14.2.11), "Exp", lines: +17 -8 crypto/evp/evptests.txt (1.9.2.2), "Exp", lines: +48 -1 Working CFB1 and test vectors. 2003-07-29 15:24 ben Changed: crypto/evp/e_aes.c (1.6.2.6), "Exp", lines: +14 -0 crypto/objects/obj_dat.h (1.49.2.14), "Exp", lines: +15 -5 crypto/objects/obj_mac.h (1.19.2.14), "Exp", lines: +10 -0 crypto/objects/obj_mac.num (1.15.2.10), "Exp", lines: +2 -0 crypto/objects/objects.txt (1.20.2.15), "Exp", lines: +2 -0 fips/aes/Makefile.ssl (1.1.2.3), "Exp", lines: +1 -1 fips/aes/fips_aesavs.c (1.1.2.4), "Exp", lines: +34 -19 The rest of the keysizes for CFB1, working AES AVS test for CFB1. 2003-07-29 19:05 ben Changed: crypto/aes/aes.h (1.1.2.7), "Exp", lines: +3 -0 crypto/aes/aes_cfb.c (1.1.2.7), "Exp", lines: +14 -0 crypto/evp/c_allc.c (1.8.2.4), "Exp", lines: +1 -0 crypto/evp/e_aes.c (1.6.2.7), "Exp", lines: +4 -9 crypto/evp/evptests.txt (1.9.2.3), "Exp", lines: +48 -0 crypto/objects/obj_dat.h (1.49.2.15), "Exp", lines: +20 -5 crypto/objects/obj_mac.h (1.19.2.15), "Exp", lines: +15 -0 crypto/objects/obj_mac.num (1.15.2.11), "Exp", lines: +3 -0 crypto/objects/objects.txt (1.20.2.16), "Exp", lines: +3 -0 fips/aes/fips_aesavs.c (1.1.2.7), "Exp", lines: +11 -0 AES CFB8. 2003-07-30 20:30 ben Changed: Makefile.org (1.154.2.70), "Exp", lines: +16 -5 crypto/des/cfb_enc.c (1.7.2.1), "Exp", lines: +2 -1 crypto/des/des_enc.c (1.11.2.2), "Exp", lines: +4 -0 crypto/evp/e_aes.c (1.6.2.8), "Exp", lines: +7 -14 crypto/evp/e_des.c (1.5.2.3), "Exp", lines: +37 -1 crypto/evp/evp.h (1.86.2.12), "Exp", lines: +6 -0 crypto/evp/evp_locl.h (1.7.2.4), "Exp", lines: +9 -0 crypto/objects/obj_dat.h (1.49.2.16), "Exp", lines: +48 -23 crypto/objects/obj_mac.h (1.19.2.16), "Exp", lines: +31 -6 crypto/objects/obj_mac.num (1.15.2.12), "Exp", lines: +5 -0 crypto/objects/objects.txt (1.20.2.17), "Exp", lines: +12 -6 fips/Makefile.ssl (1.1.2.4), "Exp", lines: +8 -1 fips/fips_make_sha1 (1.1.2.3), "Exp", lines: +3 -0 fips/aes/Makefile.ssl (1.1.2.4), "Exp", lines: +1 -1 fips/des/.cvsignore (1.1.2.1), "Exp", lines: +3 -0 fips/des/Makefile.ssl (1.1.2.1), "Exp", lines: +96 -0 fips/des/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0 fips/des/fips_des_enc.c (1.1.2.1), "Exp", lines: +288 -0 fips/des/fips_des_locl.h (1.1.2.1), "Exp", lines: +428 -0 fips/des/fips_desmovs.c (1.1.2.1), "Exp", lines: +659 -0 Whoops, forgot FIPS DES, also add EVPs for DES CFB1 and 8. 2003-07-31 23:30 levitte Changed: Makefile.org (1.154.2.71), "Exp", lines: +2 -0 If FDIRS is to be treated like SDIRS, let's not forget to initialize it in Makefile.org. 2003-08-01 12:25 ben Changed: crypto/des/cfb_enc.c (1.7.2.2), "Exp", lines: +45 -36 crypto/evp/c_allc.c (1.8.2.5), "Exp", lines: +2 -0 crypto/evp/e_des.c (1.5.2.4), "Exp", lines: +8 -3 crypto/evp/evptests.txt (1.9.2.4), "Exp", lines: +6 -0 Fix DES CFB-r. 2003-08-01 12:31 ben Changed: crypto/evp/evptests.txt (1.9.2.5), "Exp", lines: +4 -0 DES CFB8 test. 2003-08-11 11:56 levitte Changed: apps/Makefile.ssl (1.100.2.24), "Exp", lines: +1 -1 Oops, removed a little too much. 2003-08-11 13:46 levitte Changed: test/Makefile.ssl (1.84.2.33), "Exp", lines: +28 -28 Don't fiddle with LD_LIBRARY_PATH when building non-static. 2003-08-14 08:54 levitte Changed: apps/Makefile.ssl (1.100.2.25), "Exp", lines: +1 -1 test/Makefile.ssl (1.84.2.34), "Exp", lines: +28 -28 Undo the change that left LD_LIBRARY_PATH unchanged. The errors I saw weren't due to that, but to a change on the SCO machines I used for testing, where my $PATH was suddenly incorrect. 2004-01-21 10:58 appro Changed: Configure (1.314.2.89), "Exp", lines: +1 -0 config (1.95.2.27), "Exp", lines: +7 -6 crypto/bn/Makefile.ssl (1.65.2.7), "Exp", lines: +3 -0 Proper support for HP-UX64 gcc build. PR: 772 2004-01-29 10:41 levitte Changed: crypto/bn/bn_lcl.h (1.23.2.6), "Exp", lines: +8 -9 Have the declarations match the definitions. 2004-03-17 05:01 mark Changed: CHANGES (1.977.2.128), "Exp", lines: +9 -1 FAQ (1.61.2.30), "Exp", lines: +1 -1 LICENSE (1.7.2.3), "Exp", lines: +1 -1 NEWS (1.39.2.21), "Exp", lines: +8 -0 README (1.39.2.24), "Exp", lines: +2 -2 STATUS (1.211.2.41), "Exp", lines: +4 -1 openssl.spec (1.6.2.6), "Exp", lines: +1 -1 crypto/opensslv.h (1.40.2.21), "Exp", lines: +2 -2 ssl/s3_pkt.c (1.46.2.6), "Exp", lines: +8 -0 ssl/s3_srvr.c (1.85.2.20), "Exp", lines: +16 -0 Fix null-pointer assignment in do_change_cipher_spec() revealed by using the Codenomicon TLS Test Tool (CAN-2004-0079) Fix flaw in SSL/TLS handshaking when using Kerberos ciphersuites (CAN-2004-0112) Ready for 0.9.7d build Submitted by: Steven Henson Reviewed by: Joe Orton Approved by: Mark Cox 2004-04-02 14:39 levitte Changed: crypto/bn/Makefile.ssl (1.65.2.8), "Exp", lines: +1 -1 Typo. "pa-rics2W" corrected to "pa-risc2W". PR: 868 2004-05-12 12:09 levitte Changed: apps/apps.h (1.44.2.13), "Exp", lines: +0 -6 crypto/o_str.c (1.5.2.1), "Exp", lines: +4 -3 crypto/o_str.h (1.2.6.1), "Exp", lines: +0 -0 The functions OPENSSL_strcasen?cmp() were forgotten when merging the FIPS branch into this. It's needed at least for certain OpenVMS versions, and should really be used in a more general way. 2004-05-12 12:17 levitte Changed: crypto/Makefile (1.1.4.2), "Exp", lines: +3 -3 Forgot to update the Makefile with the o_str stuff... 2004-05-12 16:11 ben Changed: crypto/rand/rand.h (1.26.2.8), "Exp", lines: +2 -0 crypto/rand/rand_err.c (1.6.2.4), "Exp", lines: +2 -0 fips/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1 fips/fips.c (1.1.2.4), "Exp", lines: +5 -1 fips/rand/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1 fips/rand/fips_rand.c (1.1.2.5), "Exp", lines: +29 -0 Blow up in people's faces if they don't reseed. 2004-05-14 19:54 levitte Changed: util/libeay.num (1.173.2.20), "Exp", lines: +43 -54 All EVP_*_cfb functions have changed names to EVP_*_cfb64 or EVP_*_cfb128. 2004-05-17 06:39 levitte Changed: apps/enc.c (1.35.2.10), "Exp", lines: +14 -0 Make it possible for the user to choose the digest used to create the key. 2004-05-17 06:40 levitte Changed: apps/enc.c (1.35.2.11), "Exp", lines: +4 -4 Rewrite the usage to avoid confusion. 2004-06-19 15:32 ben Changed: Makefile.org (1.154.2.81), "Exp", lines: +2 -7 Make make tags make tags. 2004-06-21 20:05 levitte Changed: Makefile.org (1.154.2.82), "Exp", lines: +3 -1 Standard sh doesn't tolerate ! as part of the conditional command. PR: 900 2004-07-24 15:40 appro Changed: ssl/ssl_cert.c (1.48.2.9), "Exp", lines: +5 -2 Add casts where casts due. It's "safe" to cast, because "wrong" casts will either be optimized away or never performed. The trouble is that compiler first parses code, then optimizes, not both at once... 2004-07-27 16:09 levitte Changed: makevms.com (1.35.2.5), "Exp", lines: +1 -1 Typo 2004-08-02 16:15 levitte Changed: crypto/cryptlib.c (1.32.2.13), "Exp", lines: +4 -4 Let's lock a write lock when changing values, shall we? Thanks to Dr Stephen Henson for making me aware of this error. 2004-08-11 22:34 levitte Changed: apps/makeapps.com (1.18.2.6), "Exp", lines: +2 -2 Another missing module in the VMS build files. I believe this is the last, though... 2004-09-11 11:45 levitte Changed: test/testenc.com (1.6.8.2), "Exp", lines: +1 -1 Makefile.ssl changed name to Makefile... 2004-12-09 19:00 appro Changed: apps/openssl.c (1.48.2.11), "Exp", lines: +1 -1 Eliminate dependency on UNICODE macro. 2004-12-20 14:18 appro Changed: util/mklink.pl (1.6.2.2), "Exp", lines: +1 -0 When re-linking files, really relink them. In other words, emulate ln -f. 2004-12-28 00:48 appro Changed: Configure (1.314.2.103), "Exp", lines: +1 -2 Makefile.org (1.154.2.92), "Exp", lines: +2 -2 Cosmetic mingw update. PR: 924 2005-01-09 18:58 appro Changed: crypto/evp/c_alld.c (1.4.2.1), "Exp", lines: +1 -1 crypto/evp/m_sha.c (1.8.2.1), "Exp", lines: +1 -1 crypto/sha/shatest.c (1.11.2.2), "Exp", lines: +2 -2 Allow for ./config no-sha0. PR: 993 2005-01-11 07:53 levitte Changed: apps/apps.c (1.49.2.31), "Exp", lines: +0 -16 Remove VMS_strcasecmp() from apps.c, it's not used any more. And besides, the implementation is bogus. 2005-02-03 12:09 appro Changed: Configure (1.314.2.105), "Exp", lines: +2 -2 Makefile.org (1.154.2.94), "Exp", lines: +16 -6 TABLE (1.99.2.44), "Exp", lines: +2 -2 Final HP-UX specific touches to "cope with run-time linker on multi-ABI platforms." 2005-03-12 10:28 appro Changed: Makefile.org (1.154.2.95), "Exp", lines: +9 -2 apps/Makefile (1.1.4.13), "Exp", lines: +0 -1 test/Makefile (1.1.4.9), "Exp", lines: +0 -1 Move copying of .dll to apps/ and test/ to more appropriate place. 2005-03-12 13:15 appro Changed: apps/Makefile (1.1.4.14), "Exp", lines: +4 -2 test/Makefile (1.1.4.10), "Exp", lines: +42 -194 Fold rules in test/Makefile and provide hooks for updated FIPS build procedures. 2005-03-15 10:46 appro Changed: Makefile.org (1.154.2.96), "Exp", lines: +1 -1 crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3 fips/Makefile (1.1.4.8), "Exp", lines: +4 -1 Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this in crypto/Makefile and make Makefile.org and fips/Makefile more discreet. 2005-03-26 20:32 appro Changed: crypto/perlasm/x86nasm.pl (1.2.8.8), "Exp", lines: +6 -1 Resolve "operation size not specified" in NASM modules. 2005-04-03 21:16 appro Changed: Configure (1.314.2.109), "Exp", lines: +10 -0 TABLE (1.99.2.48), "Exp", lines: +50 -0 config (1.95.2.33), "Exp", lines: +9 -2 crypto/bn/Makefile (1.1.4.4), "Exp", lines: +1 -0 crypto/rc4/Makefile (1.1.4.6), "Exp", lines: +1 -1 Extend Solaris x86 support to amd64. Note that if both gcc and Sun C are installed, it defaults to gcc, because it beats Sun C on every benchmark. Also note that gcc shared build was verified to work woth Sun C... 2005-04-14 00:47 appro Changed: Makefile.org (1.154.2.98), "Exp", lines: +1 -1 Move cygcrypto.dll above cygwin.dll. 2005-04-19 16:21 appro Changed: Configure (1.314.2.117), "Exp", lines: +24 -21 Makefile.org (1.154.2.100), "Exp", lines: +1 -11 TABLE (1.99.2.52), "Exp", lines: +20 -20 apps/Makefile (1.1.4.15), "Exp", lines: +1 -1 test/Makefile (1.1.4.12), "Exp", lines: +1 -1 Enable shared link on HP-UX.