Add the new PROBLEMS section from HEAD

[oweals/openssl.git] / STATUS

diff --git a/STATUS b/STATUS
index eb6781d630cc9b12c882f551f7cef2f5ab97c201..eb6f4acee1b26a608ce19f701e781d8e80915e44 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -1,12 +1,10 @@
 
   OpenSSL STATUS                           Last modified at
-  ______________                           $Date: 2002/06/16 18:20:28 $
+  ______________                           $Date: 2002/05/09 23:53:01 $
 
   DEVELOPMENT STATE
 
-    o  OpenSSL 0.9.8:  Under development...
-    o  OpenSSL 0.9.7-beta2: Released on June 16th, 2002
-    o  OpenSSL 0.9.7-beta1: Released on June  1st, 2002
+    o  OpenSSL 0.9.7:  Under development...
     o  OpenSSL 0.9.6d: Released on May        9th, 2002
     o  OpenSSL 0.9.6c: Released on December  21st, 2001
     o  OpenSSL 0.9.6b: Released on July       9th, 2001
@@ -20,13 +18,8 @@
     o  OpenSSL 0.9.2b: Released on March     22th, 1999
     o  OpenSSL 0.9.1c: Released on December  23th, 1998
 
-  [See also http://www.openssl.org/support/rt2.html]
-
   RELEASE SHOWSTOPPERS
 
-    o BN_mod_mul verification fails for mips3-sgi-irix
-      unless configured with no-asm
-
   AVAILABLE PATCHES
 
     o 
@@ -56,6 +49,9 @@
 
     o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
 
+    o  Whenever strncpy is used, make sure the resulting string is NULL-terminated
+       or an error is reported
+
     o  "OpenSSL STATUS" is never up-to-date.
 
   OPEN ISSUES
@@ -84,11 +80,23 @@
                     which apparently is not flexible enough to generate
                     libcrypto)
 
-  WISHES
 
-    o  Add variants of DH_generate_parameters() and BN_generate_prime() [etc?]
-       where the callback function can request that the function be aborted.
-       [Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>]
+    o  The perl/ stuff needs a major overhaul. Currently it's
+       totally obsolete. Either we clean it up and enhance it to be up-to-date
+       with the C code or we also could replace it with the really nice
+       Net::SSLeay package we can find under
+       http://www.neuronio.pt/SSLeay.pm.html.  Ralf uses this package for a
+       longer time and it works fine and is a nice Perl module. Best would be
+       to convince the author to work for the OpenSSL project and create a
+       Net::OpenSSL or Crypt::OpenSSL package out of it and maintains it for
+       us.
+
+       Status: Ralf thinks we should both contact the author of Net::SSLeay
+               and look how much effort it is to bring Eric's perl/ stuff up
+               to date.
+               Paul +1
+
+  WISHES
 
     o  SRP in TLS.
        [wished by: