OpenSSL STATUS Last modified at
- ______________ $Date: 2002/12/05 23:01:17 $
+ ______________ $Date: 2002/12/30 23:54:11 $
DEVELOPMENT STATE
o OpenSSL 0.9.8: Under development...
- o OpenSSL 0.9.7-beta5: Released on December 5th, 2002
- o OpenSSL 0.9.7-beta4: Released on November 19th, 2002
- Debian GNU/Linux (kernel version 2.4.19, gcc 2.95.4) - PASSED
- o OpenSSL 0.9.7-beta3: Released on July 30th, 2002
- o OpenSSL 0.9.7-beta2: Released on June 16th, 2002
- o OpenSSL 0.9.7-beta1: Released on June 1st, 2002
+ o OpenSSL 0.9.7: Released on December 31st, 2002
o OpenSSL 0.9.6h: Released on December 5th, 2002
o OpenSSL 0.9.6g: Released on August 9th, 2002
o OpenSSL 0.9.6f: Released on August 8th, 2002
RELEASE SHOWSTOPPERS
- o BN_mod_mul verification fails for mips3-sgi-irix
- unless configured with no-asm
-
o [2002-11-21]
PR 343 mentions that scrubbing memory with 'memset(ptr, 0, n)' may
be optimized away in modern compilers. This is definitely not good
UTIL (a new set of library functions to support some higher level
functionality that is currently missing).
Shared library support for VMS.
- Kerberos 5 authentication
+ Kerberos 5 authentication (Heimdal)
Constification
- OCSP
NEEDS PATCH
- o 0.9.8-dev: COMPLEMENTOFALL and COMPLEMENTOFDEFAULT do not
- handle ECCdraft cipher suites correctly.
-
o apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
o "OpenSSL STATUS" is never up-to-date.