Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/crypto/dist/openssl openssl 0.9.7c. security changes are al...



details:   https://anonhg.NetBSD.org/src/rev/041d4d9c67d9
branches:  trunk
changeset: 554930:041d4d9c67d9
user:      itojun <itojun%NetBSD.org@localhost>
date:      Tue Nov 04 23:25:09 2003 +0000

description:
openssl 0.9.7c.  security changes are already in place

diffstat:

 crypto/dist/openssl/Configure                           |   2 +
 crypto/dist/openssl/INSTALL.W32                         |   2 +-
 crypto/dist/openssl/Makefile.org                        |  22 ++--
 crypto/dist/openssl/Makefile.ssl                        |  26 ++--
 crypto/dist/openssl/NEWS                                |  12 ++
 crypto/dist/openssl/README                              |   2 +-
 crypto/dist/openssl/apps/CA.pl                          |   2 +-
 crypto/dist/openssl/apps/der_chop                       |   2 +-
 crypto/dist/openssl/apps/ocsp.c                         |   5 +
 crypto/dist/openssl/apps/pkcs8.c                        |  11 +-
 crypto/dist/openssl/apps/s_apps.h                       |   8 +
 crypto/dist/openssl/apps/s_client.c                     |  38 ++++---
 crypto/dist/openssl/apps/s_server.c                     |  20 ++-
 crypto/dist/openssl/apps/x509.c                         |   2 +-
 crypto/dist/openssl/bugs/SSLv3                          |   2 +-
 crypto/dist/openssl/crypto/aes/aes_cbc.c                |  12 +-
 crypto/dist/openssl/crypto/aes/aes_ctr.c                |  54 +++++++++-
 crypto/dist/openssl/crypto/asn1/a_strex.c               |   2 +-
 crypto/dist/openssl/crypto/bio/b_print.c                |   2 +-
 crypto/dist/openssl/crypto/bio/bf_buff.c                |   1 +
 crypto/dist/openssl/crypto/bn/Makefile.ssl              |   1 +
 crypto/dist/openssl/crypto/bn/bn_mul.c                  |   4 +-
 crypto/dist/openssl/crypto/des/cfb_enc.c                |  84 +++++++++-------
 crypto/dist/openssl/crypto/ec/ec_mult.c                 |  13 +-
 crypto/dist/openssl/crypto/engine/hw_ubsec.c            |   1 -
 crypto/dist/openssl/crypto/evp/Makefile.ssl             |  15 +-
 crypto/dist/openssl/crypto/evp/bio_b64.c                |  38 +++++--
 crypto/dist/openssl/crypto/evp/c_all.c                  |   3 +
 crypto/dist/openssl/crypto/md5/Makefile.ssl             |   3 +-
 crypto/dist/openssl/crypto/md5/asm/md5-586.pl           |   2 +-
 crypto/dist/openssl/crypto/md5/asm/md5-sparcv9.S        |   4 +-
 crypto/dist/openssl/crypto/o_time.c                     |   2 +-
 crypto/dist/openssl/crypto/opensslv.h                   |   4 +-
 crypto/dist/openssl/crypto/perlasm/x86ms.pl             |   3 +
 crypto/dist/openssl/crypto/perlasm/x86nasm.pl           |   3 +
 crypto/dist/openssl/crypto/perlasm/x86unix.pl           |   3 +
 crypto/dist/openssl/crypto/pkcs7/pk7_doit.c             |   5 +
 crypto/dist/openssl/crypto/rand/rand_win.c              |  14 ++-
 crypto/dist/openssl/crypto/x509/x509type.c              |   5 +-
 crypto/dist/openssl/crypto/x509v3/v3_conf.c             |   2 +-
 crypto/dist/openssl/crypto/x509v3/v3_cpols.c            |  24 ++--
 crypto/dist/openssl/crypto/x509v3/v3_lib.c              |   1 +
 crypto/dist/openssl/crypto/x509v3/v3_prn.c              |   2 +-
 crypto/dist/openssl/doc/crypto/BIO_f_base64.pod         |   5 +-
 crypto/dist/openssl/doc/ssl/SSL_CTX_set_verify.pod      |   6 +-
 crypto/dist/openssl/doc/ssl/SSL_CTX_use_certificate.pod |   4 +-
 crypto/dist/openssl/doc/ssl/SSL_accept.pod              |   3 +-
 crypto/dist/openssl/doc/ssl/SSL_connect.pod             |   3 +-
 crypto/dist/openssl/openssl.spec                        |  20 +--
 crypto/dist/openssl/ssl/kssl.c                          |  35 +++++-
 crypto/dist/openssl/ssl/kssl.h                          |   2 +-
 crypto/dist/openssl/ssl/ssl_lib.c                       |   5 +
 crypto/dist/openssl/ssl/ssl_rsa.c                       |   4 +-
 crypto/dist/openssl/tools/c_rehash                      |   2 +-
 crypto/dist/openssl/util/extract-names.pl               |   4 +-
 crypto/dist/openssl/util/libeay.num                     |   2 +
 crypto/dist/openssl/util/pl/Mingw32.pl                  |   2 +-
 crypto/dist/openssl/util/point.sh                       |   6 +-
 58 files changed, 362 insertions(+), 204 deletions(-)

diffs (truncated from 1737 to 300 lines):

diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/Configure
--- a/crypto/dist/openssl/Configure     Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/Configure     Tue Nov 04 23:25:09 2003 +0000
@@ -560,6 +560,8 @@
 "vxworks-ppc405","ccppc:-g -msoft-float -mlongcall -DCPU=PPC405 -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 "vxworks-ppc750","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h 
\$(DEBUG_FLAG):::VXWORKS:-r:::::",
 "vxworks-ppc750-debug","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h 
-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DDEBUG -g:::VXWORKS:-r:::::",
+"vxworks-ppc860","ccppc:-nostdinc -msoft-float -DCPU=PPC860 -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
+"vxworks-mipsle","ccmips:-B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -DL_ENDIAN -EL -Wl,-EL -mips2 -mno-branch-likely -G 0 -fno-builtin -msoft-float -DCPU=MIPS32 -DMIPSEL -DNO_STRINGS_H 
-I\$(WIND_BASE)/target/h:::VXWORKS:-r::::::::::::::::ranlibmips:",
 
 ##### Compaq Non-Stop Kernel (Tandem)
 "tandem-c89","c89:-Ww -D__TANDEM -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -D_TANDEM_SOURCE -DB_ENDIAN::(unknown):::THIRTY_TWO_BIT:::",
diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/INSTALL.W32
--- a/crypto/dist/openssl/INSTALL.W32   Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/INSTALL.W32   Tue Nov 04 23:25:09 2003 +0000
@@ -225,7 +225,7 @@
        $ md c:\openssl\lib
        $ md c:\openssl\include
        $ md c:\openssl\include\openssl
-       $ copy /b inc32\*               c:\openssl\include\openssl
+       $ copy /b inc32\openssl\*       c:\openssl\include\openssl
        $ copy /b out32dll\ssleay32.lib c:\openssl\lib
        $ copy /b out32dll\libeay32.lib c:\openssl\lib
        $ copy /b out32dll\ssleay32.dll c:\openssl\bin
diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/Makefile.org
--- a/crypto/dist/openssl/Makefile.org  Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/Makefile.org  Tue Nov 04 23:25:09 2003 +0000
@@ -78,7 +78,7 @@
 # gcc, then the driver will automatically translate it to -xarch=v8plus
 # and pass it down to assembler.
 AS=$(CC) -c
-ASFLAGS=$(CFLAG)
+ASFLAG=$(CFLAG)
 
 # Set BN_ASM to bn_asm.o if you want to use the C version
 BN_ASM= bn_asm.o
@@ -194,6 +194,7 @@
 MANDIR=$(OPENSSLDIR)/man
 MAN1=1
 MAN3=3
+MANSUFFIX=
 SHELL=/bin/sh
 
 TOP=    .
@@ -225,7 +226,7 @@
        do \
        if [ -d "$$i" ]; then \
                (cd $$i && echo "making all in $$i..." && \
-               $(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' AS='${AS}' ASFLAGS='${ASFLAGS}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' 
BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' 
RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' KRB5_INCLUDES='${KRB5_INCLUDES}' LIBKRB5='${LIBKRB5}' EXE_EXT='${EXE_EXT}' 
SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' all ) || exit 1; \
+               $(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' AS='${AS}' ASFLAG='${ASFLAG}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' 
BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' 
RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' KRB5_INCLUDES='${KRB5_INCLUDES}' LIBKRB5='${LIBKRB5}' EXE_EXT='${EXE_EXT}' 
SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' all ) || exit 1; \
        else \
                $(MAKE) $$i; \
        fi; \
@@ -410,7 +411,7 @@
                  find . -name "*.o" -print > allobjs ; \
                  OBJS= ; export OBJS ; \
                  for obj in `ar t lib$$i.a` ; do \
-                   OBJS="$${OBJS} `grep $$obj allobjs`" ; \
+                   OBJS="$${OBJS} `grep /$$obj allobjs`" ; \
                  done ; \
                  set -x; ${CC} ${SHARED_LDFLAGS} \
                        -G -o lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
@@ -435,7 +436,7 @@
                  find . -name "*.o" -print > allobjs ; \
                  OBJS= ; export OBJS ; \
                  for obj in `ar t lib$$i.a` ; do \
-                   OBJS="$${OBJS} `grep $$obj allobjs`" ; \
+                   OBJS="$${OBJS} `grep /$$obj allobjs`" ; \
                  done ; \
                  set -x; LD_LIBRARY_PATH=.:$$LD_LIBRARY_PATH \
                        ${CC} ${SHARED_LDFLAGS} \
@@ -831,6 +832,7 @@
                fi; \
        fi
        cp openssl.pc $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
+       chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
 
 install_docs:
        @$(PERL) $(TOP)/util/mkdir-p.pl \
@@ -847,33 +849,33 @@
        for i in doc/apps/*.pod; do \
                fn=`basename $$i .pod`; \
                if [ "$$fn" = "config" ]; then sec=5; else sec=1; fi; \
-               echo "installing man$$sec/$$fn.$$sec"; \
+               echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
                (cd `$(PERL) util/dirname.pl $$i`; \
                sh -c "$$pod2man \
                        --section=$$sec --center=OpenSSL \
                        --release=$(VERSION) `basename $$i`") \
-                       >  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$$sec; \
+                       >  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
                $(PERL) util/extract-names.pl < $$i | \
                        grep -v $$filecase "^$$fn\$$" | \
                        (cd $(INSTALL_PREFIX)$(MANDIR)/man$$sec/; \
                         while read n; do \
-                               $$here/util/point.sh $$fn.$$sec $$n.$$sec; \
+                               $$here/util/point.sh $$fn.$${sec}$(MANSUFFIX) "$$n".$${sec}$(MANSUFFIX); \
                         done); \
        done; \
        for i in doc/crypto/*.pod doc/ssl/*.pod; do \
                fn=`basename $$i .pod`; \
                if [ "$$fn" = "des_modes" ]; then sec=7; else sec=3; fi; \
-               echo "installing man$$sec/$$fn.$$sec"; \
+               echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
                (cd `$(PERL) util/dirname.pl $$i`; \
                sh -c "$$pod2man \
                        --section=$$sec --center=OpenSSL \
                        --release=$(VERSION) `basename $$i`") \
-                       >  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$$sec; \
+                       >  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
                $(PERL) util/extract-names.pl < $$i | \
                        grep -v $$filecase "^$$fn\$$" | \
                        (cd $(INSTALL_PREFIX)$(MANDIR)/man$$sec/; \
                         while read n; do \
-                               $$here/util/point.sh $$fn.$$sec $$n.$$sec; \
+                               $$here/util/point.sh $$fn.$${sec}$(MANSUFFIX) "$$n".$${sec}$(MANSUFFIX); \
                         done); \
        done
 
diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/Makefile.ssl
--- a/crypto/dist/openssl/Makefile.ssl  Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/Makefile.ssl  Tue Nov 04 23:25:09 2003 +0000
@@ -4,7 +4,7 @@
 ## Makefile for OpenSSL
 ##
 
-VERSION=0.9.7b
+VERSION=0.9.7c
 MAJOR=0
 MINOR=9.7
 SHLIB_VERSION_NUMBER=0.9.7
@@ -69,7 +69,7 @@
 ARFLAGS= 
 AR=ar $(ARFLAGS) r
 RANLIB= /usr/bin/ranlib
-PERL= /usr/local/bin/perl
+PERL= /usr/bin/perl
 TAR= tar
 TARFLAGS= --no-recursion
 MAKEDEPPROG=makedepend
@@ -80,7 +80,7 @@
 # gcc, then the driver will automatically translate it to -xarch=v8plus
 # and pass it down to assembler.
 AS=$(CC) -c
-ASFLAGS=$(CFLAG)
+ASFLAG=$(CFLAG)
 
 # Set BN_ASM to bn_asm.o if you want to use the C version
 BN_ASM= bn_asm.o
@@ -196,6 +196,7 @@
 MANDIR=$(OPENSSLDIR)/man
 MAN1=1
 MAN3=3
+MANSUFFIX=
 SHELL=/bin/sh
 
 TOP=    .
@@ -227,7 +228,7 @@
        do \
        if [ -d "$$i" ]; then \
                (cd $$i && echo "making all in $$i..." && \
-               $(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' AS='${AS}' ASFLAGS='${ASFLAGS}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' 
BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' 
RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' KRB5_INCLUDES='${KRB5_INCLUDES}' LIBKRB5='${LIBKRB5}' EXE_EXT='${EXE_EXT}' 
SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' all ) || exit 1; \
+               $(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' AS='${AS}' ASFLAG='${ASFLAG}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' 
BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' 
RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' KRB5_INCLUDES='${KRB5_INCLUDES}' LIBKRB5='${LIBKRB5}' EXE_EXT='${EXE_EXT}' 
SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' all ) || exit 1; \
        else \
                $(MAKE) $$i; \
        fi; \
@@ -412,7 +413,7 @@
                  find . -name "*.o" -print > allobjs ; \
                  OBJS= ; export OBJS ; \
                  for obj in `ar t lib$$i.a` ; do \
-                   OBJS="$${OBJS} `grep $$obj allobjs`" ; \
+                   OBJS="$${OBJS} `grep /$$obj allobjs`" ; \
                  done ; \
                  set -x; ${CC} ${SHARED_LDFLAGS} \
                        -G -o lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
@@ -437,7 +438,7 @@
                  find . -name "*.o" -print > allobjs ; \
                  OBJS= ; export OBJS ; \
                  for obj in `ar t lib$$i.a` ; do \
-                   OBJS="$${OBJS} `grep $$obj allobjs`" ; \
+                   OBJS="$${OBJS} `grep /$$obj allobjs`" ; \
                  done ; \
                  set -x; LD_LIBRARY_PATH=.:$$LD_LIBRARY_PATH \
                        ${CC} ${SHARED_LDFLAGS} \
@@ -833,6 +834,7 @@
                fi; \
        fi
        cp openssl.pc $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
+       chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
 
 install_docs:
        @$(PERL) $(TOP)/util/mkdir-p.pl \
@@ -849,33 +851,33 @@
        for i in doc/apps/*.pod; do \
                fn=`basename $$i .pod`; \
                if [ "$$fn" = "config" ]; then sec=5; else sec=1; fi; \
-               echo "installing man$$sec/$$fn.$$sec"; \
+               echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
                (cd `$(PERL) util/dirname.pl $$i`; \
                sh -c "$$pod2man \
                        --section=$$sec --center=OpenSSL \
                        --release=$(VERSION) `basename $$i`") \
-                       >  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$$sec; \
+                       >  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
                $(PERL) util/extract-names.pl < $$i | \
                        grep -v $$filecase "^$$fn\$$" | \
                        (cd $(INSTALL_PREFIX)$(MANDIR)/man$$sec/; \
                         while read n; do \
-                               $$here/util/point.sh $$fn.$$sec $$n.$$sec; \
+                               $$here/util/point.sh $$fn.$${sec}$(MANSUFFIX) "$$n".$${sec}$(MANSUFFIX); \
                         done); \
        done; \
        for i in doc/crypto/*.pod doc/ssl/*.pod; do \
                fn=`basename $$i .pod`; \
                if [ "$$fn" = "des_modes" ]; then sec=7; else sec=3; fi; \
-               echo "installing man$$sec/$$fn.$$sec"; \
+               echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
                (cd `$(PERL) util/dirname.pl $$i`; \
                sh -c "$$pod2man \
                        --section=$$sec --center=OpenSSL \
                        --release=$(VERSION) `basename $$i`") \
-                       >  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$$sec; \
+                       >  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
                $(PERL) util/extract-names.pl < $$i | \
                        grep -v $$filecase "^$$fn\$$" | \
                        (cd $(INSTALL_PREFIX)$(MANDIR)/man$$sec/; \
                         while read n; do \
-                               $$here/util/point.sh $$fn.$$sec $$n.$$sec; \
+                               $$here/util/point.sh $$fn.$${sec}$(MANSUFFIX) "$$n".$${sec}$(MANSUFFIX); \
                         done); \
        done
 
diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/NEWS
--- a/crypto/dist/openssl/NEWS  Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/NEWS  Tue Nov 04 23:25:09 2003 +0000
@@ -5,6 +5,13 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
+  Major changes between OpenSSL 0.9.7b and OpenSSL 0.9.7c:
+
+      o Security: fix various ASN1 parsing bugs.
+      o New -ignore_err option to OCSP utility.
+      o Various interop and bug fixes in S/MIME code.
+      o SSL/TLS protocol fix for unrequested client certificates.
+
   Major changes between OpenSSL 0.9.7a and OpenSSL 0.9.7b:
 
       o Security: counter the Klima-Pokorny-Rosa extension of
@@ -73,6 +80,11 @@
       o SSL/TLS: add callback to retrieve SSL/TLS messages.
       o SSL/TLS: support AES cipher suites (RFC3268).
 
+  Major changes between OpenSSL 0.9.6j and OpenSSL 0.9.6k:
+
+      o Security: fix various ASN1 parsing bugs.
+      o SSL/TLS protocol fix for unrequested client certificates.
+
   Major changes between OpenSSL 0.9.6i and OpenSSL 0.9.6j:
 
       o Security: counter the Klima-Pokorny-Rosa extension of
diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/README
--- a/crypto/dist/openssl/README        Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/README        Tue Nov 04 23:25:09 2003 +0000
@@ -1,5 +1,5 @@
 
- OpenSSL 0.9.7b 10 Apr 2003
+ OpenSSL 0.9.7c 30 Sep 2003
 
  Copyright (c) 1998-2003 The OpenSSL Project
  Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/apps/CA.pl
--- a/crypto/dist/openssl/apps/CA.pl    Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/apps/CA.pl    Tue Nov 04 23:25:09 2003 +0000
@@ -1,4 +1,4 @@
-#!/usr/local/bin/perl
+#!/usr/bin/perl
 #
 # CA - wrapper around ca to make it easier to use ... basically ca requires
 #      some setup stuff to be done before you can use it and this makes
diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/apps/der_chop
--- a/crypto/dist/openssl/apps/der_chop Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/apps/der_chop Tue Nov 04 23:25:09 2003 +0000
@@ -1,4 +1,4 @@
-#!/usr/local/bin/perl
+#!/usr/bin/perl
 #
 # der_chop ... this is one total hack that Eric is really not proud of
 #              so don't look at it and don't ask for support
diff -r 62528515520b -r 041d4d9c67d9 crypto/dist/openssl/apps/ocsp.c
--- a/crypto/dist/openssl/apps/ocsp.c   Tue Nov 04 23:19:12 2003 +0000
+++ b/crypto/dist/openssl/apps/ocsp.c   Tue Nov 04 23:25:09 2003 +0000
@@ -136,6 +136,7 @@
        int accept_count = -1;
        int badarg = 0;
        int i;
+       int ignore_err = 0;
        STACK *reqnames = NULL;
        STACK_OF(OCSP_CERTID) *ids = NULL;
 



Home | Main Index | Thread Index | Old Index