Add news items for 0.9.6h and expand on the 0.9.7 news as well.

[oweals/openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 0ffd33fd0c20ebcf8e9d617693f9835fa6c6ea8e..02069948cc644aa82785da766a4fb55282cd4f82 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,15 @@
 
  Changes between 0.9.6h and 0.9.7  [XX xxx 2002]
 
+  *) Add the VC-CE target, introduce the WINCE sysname, and add
+     INSTALL.WCE and appropriate conditionals to make it build.
+     [Steven Reddie <smr@essemer.com.au> via Richard Levitte]
+
+  *) Change the DLL names for Cygwin to cygcrypto-x.y.z.dll and
+     cygssl-x.y.z.dll, where x, y and z are the major, minor and
+     edit numbers of the version.
+     [Corinna Vinschen <vinschen@redhat.com> and Richard Levitte]
+
   *) Introduce safe string copy and catenation functions
      (BUF_strlcpy() and BUF_strlcat()).
      [Ben Laurie (CHATS) and Richard Levitte]
@@ -31,10 +40,6 @@
      overflows.
      [Ben Laurie (CHATS)]
 
-  *) New OPENSSL_assert() macro (similar to assert(), but enabled
-     unconditionally).
-     [Ben Laurie (CHATS)]
-
   *) Don't cache truncated DNS entries in the local cache (this could
      potentially lead to a spoofing attack).
      [Ben Laurie (CHATS)]
@@ -58,8 +63,12 @@
      full. Fixed.
      [Ben Laurie (CHATS)]
 
-  *) Add assertions to prevent crypto functions from overflowing
-     internal buffers by having large block sizes, etc.
+  *) Add assertions to prevent user-supplied crypto functions from
+     overflowing internal buffers by having large block sizes, etc.
+     [Ben Laurie (CHATS)]
+
+  *) New OPENSSL_assert() macro (similar to assert(), but enabled
+     unconditionally).
      [Ben Laurie (CHATS)]
 
   *) Eliminate unused copy of key in RC4.
@@ -1771,6 +1780,16 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
 
  Changes between 0.9.6g and 0.9.6h  [xx XXX xxxx]
 
+  *) Fix client_certificate (ssl/s2_clnt.c): The permissible total
+     length of the REQUEST-CERTIFICATE message is 18 .. 34, not 17 .. 33.
+     [Zeev Lieber <zeev-l@yahoo.com>]
+
+  *) Undo an undocumented change introduced in 0.9.6e which caused
+     repeated calls to OpenSSL_add_all_ciphers() and 
+     OpenSSL_add_all_digests() to be ignored, even after calling
+     EVP_cleanup().
+     [Richard Levitte]
+
   *) Change the default configuration reader to deal with last line not
      being properly terminated.
      [Richard Levitte]