1998-12-30 09:08:05 +00:00
|
|
|
|
|
|
|
OpenSSL STATUS Last modified at
|
2011-02-08 17:10:53 +00:00
|
|
|
______________ $Date: 2011/02/08 17:10:52 $
|
1998-12-30 09:08:05 +00:00
|
|
|
|
|
|
|
DEVELOPMENT STATE
|
|
|
|
|
2010-03-30 00:55:00 +00:00
|
|
|
o OpenSSL 1.1.0: Under development...
|
2011-02-08 17:10:53 +00:00
|
|
|
o OpenSSL 1.0.1: Under development...
|
|
|
|
o OpenSSL 1.0.0d: Released on February 8nd, 2011
|
2010-12-02 18:29:04 +00:00
|
|
|
o OpenSSL 1.0.0c: Released on December 2nd, 2010
|
2010-11-16 13:35:09 +00:00
|
|
|
o OpenSSL 1.0.0b: Released on November 16th, 2010
|
2010-06-01 13:31:38 +00:00
|
|
|
o OpenSSL 1.0.0a: Released on June 1st, 2010
|
2010-03-29 13:11:54 +00:00
|
|
|
o OpenSSL 1.0.0: Released on March 29th, 2010
|
2011-02-08 17:10:53 +00:00
|
|
|
o OpenSSL 0.9.8r: Released on February 8nd, 2011
|
|
|
|
o OpenSSL 0.9.8q: Released on December 2nd, 2010
|
|
|
|
o OpenSSL 0.9.8p: Released on November 16th, 2010
|
|
|
|
o OpenSSL 0.9.8o: Released on June 1st, 2010
|
2010-03-29 13:11:54 +00:00
|
|
|
o OpenSSL 0.9.8n: Released on March 24th, 2010
|
|
|
|
o OpenSSL 0.9.8m: Released on February 25th, 2010
|
2010-01-20 15:00:49 +00:00
|
|
|
o OpenSSL 0.9.8l: Released on November 5th, 2009
|
|
|
|
o OpenSSL 0.9.8k: Released on March 25th, 2009
|
|
|
|
o OpenSSL 0.9.8j: Released on January 7th, 2009
|
|
|
|
o OpenSSL 0.9.8i: Released on September 15th, 2008
|
2008-05-28 22:30:28 +00:00
|
|
|
o OpenSSL 0.9.8h: Released on May 28th, 2008
|
2007-10-19 08:26:03 +00:00
|
|
|
o OpenSSL 0.9.8g: Released on October 19th, 2007
|
|
|
|
o OpenSSL 0.9.8f: Released on October 11th, 2007
|
|
|
|
o OpenSSL 0.9.8e: Released on February 23rd, 2007
|
|
|
|
o OpenSSL 0.9.8d: Released on September 28th, 2006
|
|
|
|
o OpenSSL 0.9.8c: Released on September 5th, 2006
|
|
|
|
o OpenSSL 0.9.8b: Released on May 4th, 2006
|
2005-10-26 19:40:45 +00:00
|
|
|
o OpenSSL 0.9.8a: Released on October 11th, 2005
|
2005-07-05 19:16:24 +00:00
|
|
|
o OpenSSL 0.9.8: Released on July 5th, 2005
|
2008-05-28 22:30:28 +00:00
|
|
|
o OpenSSL 0.9.7m: Released on February 23rd, 2007
|
|
|
|
o OpenSSL 0.9.7l: Released on September 28th, 2006
|
|
|
|
o OpenSSL 0.9.7k: Released on September 5th, 2006
|
|
|
|
o OpenSSL 0.9.7j: Released on May 4th, 2006
|
|
|
|
o OpenSSL 0.9.7i: Released on October 14th, 2005
|
2005-10-26 19:40:45 +00:00
|
|
|
o OpenSSL 0.9.7h: Released on October 11th, 2005
|
2005-04-25 21:42:14 +00:00
|
|
|
o OpenSSL 0.9.7g: Released on April 11th, 2005
|
|
|
|
o OpenSSL 0.9.7f: Released on March 22nd, 2005
|
|
|
|
o OpenSSL 0.9.7e: Released on October 25th, 2004
|
|
|
|
o OpenSSL 0.9.7d: Released on March 17th, 2004
|
|
|
|
o OpenSSL 0.9.7c: Released on September 30th, 2003
|
|
|
|
o OpenSSL 0.9.7b: Released on April 10th, 2003
|
2003-02-19 14:02:37 +00:00
|
|
|
o OpenSSL 0.9.7a: Released on February 19th, 2003
|
2002-12-30 23:56:09 +00:00
|
|
|
o OpenSSL 0.9.7: Released on December 31st, 2002
|
2005-04-25 21:42:14 +00:00
|
|
|
o OpenSSL 0.9.6m: Released on March 17th, 2004
|
|
|
|
o OpenSSL 0.9.6l: Released on November 4th, 2003
|
|
|
|
o OpenSSL 0.9.6k: Released on September 30th, 2003
|
|
|
|
o OpenSSL 0.9.6j: Released on April 10th, 2003
|
2003-02-19 14:02:37 +00:00
|
|
|
o OpenSSL 0.9.6i: Released on February 19th, 2003
|
2002-12-05 21:50:13 +00:00
|
|
|
o OpenSSL 0.9.6h: Released on December 5th, 2002
|
2002-08-12 06:54:54 +00:00
|
|
|
o OpenSSL 0.9.6g: Released on August 9th, 2002
|
2002-08-08 22:55:28 +00:00
|
|
|
o OpenSSL 0.9.6f: Released on August 8th, 2002
|
2002-07-30 11:32:47 +00:00
|
|
|
o OpenSSL 0.9.6e: Released on July 30th, 2002
|
2002-05-09 23:54:02 +00:00
|
|
|
o OpenSSL 0.9.6d: Released on May 9th, 2002
|
2001-12-21 03:23:15 +00:00
|
|
|
o OpenSSL 0.9.6c: Released on December 21st, 2001
|
2001-07-17 14:39:26 +00:00
|
|
|
o OpenSSL 0.9.6b: Released on July 9th, 2001
|
2001-04-09 07:15:16 +00:00
|
|
|
o OpenSSL 0.9.6a: Released on April 5th, 2001
|
2000-09-24 15:42:34 +00:00
|
|
|
o OpenSSL 0.9.6: Released on September 24th, 2000
|
|
|
|
o OpenSSL 0.9.5a: Released on April 1st, 2000
|
|
|
|
o OpenSSL 0.9.5: Released on February 28th, 2000
|
|
|
|
o OpenSSL 0.9.4: Released on August 09th, 1999
|
|
|
|
o OpenSSL 0.9.3a: Released on May 29th, 1999
|
|
|
|
o OpenSSL 0.9.3: Released on May 25th, 1999
|
|
|
|
o OpenSSL 0.9.2b: Released on March 22th, 1999
|
|
|
|
o OpenSSL 0.9.1c: Released on December 23th, 1998
|
1998-12-30 09:08:05 +00:00
|
|
|
|
2008-04-07 06:37:05 +00:00
|
|
|
[See also http://www.openssl.org/support/rt.html]
|
2002-02-20 12:31:23 +00:00
|
|
|
|
2002-05-16 09:28:09 +00:00
|
|
|
RELEASE SHOWSTOPPERS
|
2002-02-20 12:31:23 +00:00
|
|
|
|
2005-06-28 05:55:22 +00:00
|
|
|
o The Makefiles fail with some SysV makes.
|
2003-02-28 15:17:45 +00:00
|
|
|
o
|
2002-11-21 22:39:08 +00:00
|
|
|
|
1998-12-30 09:08:05 +00:00
|
|
|
AVAILABLE PATCHES
|
|
|
|
|
2001-11-14 21:21:47 +00:00
|
|
|
o
|
2001-07-17 14:39:26 +00:00
|
|
|
|
1998-12-30 09:08:05 +00:00
|
|
|
IN PROGRESS
|
|
|
|
|
1999-03-29 00:19:55 +00:00
|
|
|
o Steve is currently working on (in no particular order):
|
2000-07-02 21:11:11 +00:00
|
|
|
ASN1 code redesign, butchery, replacement.
|
2000-12-13 18:21:51 +00:00
|
|
|
OCSP
|
2000-05-26 23:51:35 +00:00
|
|
|
EVP cipher enhancement.
|
2000-12-13 18:21:51 +00:00
|
|
|
Enhanced certificate chain verification.
|
1999-04-16 23:57:04 +00:00
|
|
|
Private key, certificate and CRL API and implementation.
|
1999-12-05 00:40:59 +00:00
|
|
|
Developing and bugfixing PKCS#7 (S/MIME code).
|
1999-08-09 22:38:05 +00:00
|
|
|
Various X509 issues: character sets, certificate request extensions.
|
2000-06-14 17:27:02 +00:00
|
|
|
o Richard is currently working on:
|
2000-11-19 14:11:03 +00:00
|
|
|
Constification
|
2002-12-07 20:02:20 +00:00
|
|
|
Attribute Certificate support
|
|
|
|
Certificate Pair support
|
|
|
|
Storage Engines (primarly an LDAP storage engine)
|
2002-12-12 19:40:55 +00:00
|
|
|
Certificate chain validation with full RFC 3280 compatibility
|
1999-01-30 17:35:01 +00:00
|
|
|
|
1998-12-30 09:08:05 +00:00
|
|
|
NEEDS PATCH
|
|
|
|
|
2002-08-14 11:07:29 +00:00
|
|
|
o 0.9.8-dev: COMPLEMENTOFALL and COMPLEMENTOFDEFAULT do not
|
|
|
|
handle ECCdraft cipher suites correctly.
|
|
|
|
|
2001-01-10 16:25:12 +00:00
|
|
|
o apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
|
1999-04-08 20:45:53 +00:00
|
|
|
|
2001-09-11 12:20:20 +00:00
|
|
|
o "OpenSSL STATUS" is never up-to-date.
|
2001-01-11 13:33:10 +00:00
|
|
|
|
2001-09-11 12:20:20 +00:00
|
|
|
OPEN ISSUES
|
2001-01-10 16:37:35 +00:00
|
|
|
|
1999-01-02 16:28:51 +00:00
|
|
|
o The Makefile hierarchy and build mechanism is still not a round thing:
|
|
|
|
|
|
|
|
1. The config vs. Configure scripts
|
|
|
|
It's the same nasty situation as for Apache with APACI vs.
|
|
|
|
src/Configure. It confuses.
|
|
|
|
Suggestion: Merge Configure and config into a single configure
|
|
|
|
script with a Autoconf style interface ;-) and remove
|
|
|
|
Configure and config. Or even let us use GNU Autoconf
|
|
|
|
itself. Then we can avoid a lot of those platform checks
|
|
|
|
which are currently in Configure.
|
|
|
|
|
1998-12-31 12:14:27 +00:00
|
|
|
o Support for Shared Libraries has to be added at least
|
|
|
|
for the major Unix platforms. The details we can rip from the stuff
|
|
|
|
Ralf has done for the Apache src/Configure script. Ben wants the
|
|
|
|
solution to be really simple.
|
|
|
|
|
|
|
|
Status: Ralf will look how we can easily incorporate the
|
|
|
|
compiler PIC and linker DSO flags from Apache
|
|
|
|
into the OpenSSL Configure script.
|
|
|
|
|
1999-09-21 17:19:05 +00:00
|
|
|
Ulf: +1 for using GNU autoconf and libtool (but not automake,
|
|
|
|
which apparently is not flexible enough to generate
|
|
|
|
libcrypto)
|
|
|
|
|
1999-01-21 13:01:20 +00:00
|
|
|
WISHES
|
|
|
|
|
2002-02-09 01:49:53 +00:00
|
|
|
o Add variants of DH_generate_parameters() and BN_generate_prime() [etc?]
|
|
|
|
where the callback function can request that the function be aborted.
|
|
|
|
[Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>]
|
|
|
|
|
2001-06-04 06:51:43 +00:00
|
|
|
o SRP in TLS.
|
2001-06-04 16:23:15 +00:00
|
|
|
[wished by:
|
|
|
|
Dj <derek@yo.net>, Tom Wu <tom@arcot.com>,
|
|
|
|
Tom Holroyd <tomh@po.crl.go.jp>]
|
|
|
|
|
2001-06-04 06:51:43 +00:00
|
|
|
See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt
|
|
|
|
as well as http://www-cs-students.stanford.edu/~tjw/srp/.
|
2001-06-04 16:23:15 +00:00
|
|
|
|
|
|
|
Tom Holroyd tells us there is a SRP patch for OpenSSH at
|
|
|
|
http://members.tripod.com/professor_tom/archives/, that could
|
|
|
|
be useful.
|