X-Git-Url: https://git.librecmc.org/?a=blobdiff_plain;f=STATUS;h=028abb85abea528dfb048599b77e68ccc4017c42;hb=e9cba65a991ea2917d67a0ff2b6510ed05f6f632;hp=575f5f5638332ac3d950ef95580a596d6d57b848;hpb=f2c46006e7f2097b113fedc376f711ac14ee02f7;p=oweals%2Fopenssl.git diff --git a/STATUS b/STATUS index 575f5f5638..028abb85ab 100644 --- a/STATUS +++ b/STATUS @@ -1,11 +1,9 @@ OpenSSL STATUS Last modified at - ______________ $Date: 2001/01/12 14:06:26 $ + ______________ $Date: 2000/09/24 15:42:34 $ DEVELOPMENT STATE - o OpenSSL 0.9.7: Under development... - o OpenSSL 0.9.6a: Bugfix release -- under development... o OpenSSL 0.9.6: Released on September 24th, 2000 o OpenSSL 0.9.5a: Released on April 1st, 2000 o OpenSSL 0.9.5: Released on February 28th, 2000 @@ -17,19 +15,16 @@ RELEASE SHOWSTOPPERS - o - AVAILABLE PATCHES - o + o CA.pl patch (Damien Miller) IN PROGRESS o Steve is currently working on (in no particular order): ASN1 code redesign, butchery, replacement. - OCSP EVP cipher enhancement. - Enhanced certificate chain verification. + Proper (or at least usable) certificate chain verification. Private key, certificate and CRL API and implementation. Developing and bugfixing PKCS#7 (S/MIME code). Various X509 issues: character sets, certificate request extensions. @@ -38,28 +33,19 @@ o Richard is currently working on: UTIL (a new set of library functions to support some higher level functionality that is currently missing). + Dynamic thread-lock support. Shared library support for VMS. - OCSP - Kerberos 5 authentication - Constification NEEDS PATCH - o apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file - - o #include in exported header files is illegal since - e_os.h is suitable only for library-internal use - - o Whenever strncpy is used, make sure the resulting string is NULL-terminated - or an error is reported + o non-blocking socket on AIX + o $(PERL) in */Makefile.ssl + o "Sign the certificate?" - "n" creates empty certificate file OPEN ISSUES - o crypto/ex_data.c is not really thread-safe and so must be used - with care (e.g., extra locking where necessary, or don't call - CRYPTO_get_ex_new_index once multiple threads exist). - The current API is not suitable for everything that it pretends - to offer. + o internal_verify doesn't know about X509.v3 (basicConstraints + CA flag ...) o The Makefile hierarchy and build mechanism is still not a round thing: