200 lines
7.7 KiB
Text
200 lines
7.7 KiB
Text
|
|
OpenSSL STATUS Last modified at
|
|
______________ $Date: 2000/09/21 14:51:45 $
|
|
|
|
DEVELOPMENT STATE
|
|
|
|
o OpenSSL 0.9.6: Under development (in release cycle)...
|
|
Proposed release date September 24, 2000
|
|
0.9.6-beta1 is available:
|
|
OpenBSD-x86 2.7 - failed
|
|
ftime not supported [FIXED]
|
|
hpux-parisc-cc 10.20 - passed
|
|
hpux-parisc-gcc 10.20 - passed
|
|
hpux-parisc-gcc 11.00 - passed
|
|
hpux-gcc - passed
|
|
hpux-brokengcc - failed
|
|
BN_sqr fails in test
|
|
linux-elf - passed
|
|
linux-sparcv7 - passed
|
|
linux-ppc - passed
|
|
Solaris [engine] - failed
|
|
speed cswift gives odd errors [FIXED]
|
|
solaris-sparcv8-gcc - passed
|
|
solaris-sparcv9-gcc - passed
|
|
solaris-sparcv9-cc - passed
|
|
solaris64-sparcv9-cc - passed
|
|
sco5-gcc - passed
|
|
sco5-cc - passed
|
|
FreeBSD - passed
|
|
Win32 VC++ - failed
|
|
PCURSORINFO not defined unless Win2000 [FIXED]
|
|
RAND_poll() problem on Win2000 [FIXED]
|
|
DSO method always DSO_METHOD_null [FIXED]
|
|
CygWin32 - test failed
|
|
MingW32 - failed
|
|
thelp32.h
|
|
aix-gcc (AIX 4.3.2) - passed
|
|
VMS/Alpha - failed
|
|
Some things were missing [FIXED]
|
|
0.9.6-beta2 is available:
|
|
linux/openbsd (all platforms?) - mod_exp bug
|
|
sunos-gcc - passed
|
|
aix-gcc - passed
|
|
Win32 w/ VC6 or Mingw32 - failed
|
|
RAND_poll(), a few uninitialised vars [FIXED]
|
|
RAND_poll() should used LoadLibrary instead of
|
|
GetModuleHandle [FIXED]
|
|
Major compilation problem with VC6 on NT.
|
|
[FIXED]
|
|
Mingw32 says "175: parse error before `DWORD'"
|
|
[FIXED?]
|
|
Win32 w/ CygWin - success?
|
|
VMS/Alpha 7.1 (CPQ C 5.6-003, TCP/IP 5.0) - success
|
|
Just a small warning in dso_vms.c [FIXED]
|
|
VMS/Alpha 7.2-1 (CPQ 5.6-003, TCP/IP 5.0A) - success
|
|
VMS/VAX 7.2-1 (CPQ 5.2-003, TCP/IP 5.0) - success
|
|
hpux-parisc-cc (HP-UX B.11.00) - success
|
|
hpux-parisc2-cc (11.00) - success
|
|
hpux64-parisc2-cc (11.00) - success
|
|
hpux-parisc1_1-cc (11.00) - success
|
|
hpux-parisc-cc (10.20 w/ -ldld) - success
|
|
hpux-parisc-gcc (10.20 w/ -ldld) - success
|
|
hpux-parisc-cc [engine] (10.20 w/ -ldld)- success
|
|
hpux-parisc-gcc [endine] (10.20 w/ -ldld)- success
|
|
All hpux 10.20 targets succeeded provided -ldl
|
|
has been changed to -ldld.
|
|
solaris-sparcv9-gcc (2.6/ultra5) - success
|
|
[ solaris-sparcv9-cc (SunOS 5.7 SC3.0) - failed ]
|
|
[ Complaints about a number of -x parameters to ]
|
|
[ the compiler and failed to compile an ]
|
|
[ assembler file. Maybe a too old ]
|
|
[ compiler? (Yes, apparently:) ]
|
|
solaris-sparcv9-cc (SunOS 5.6 SC4.2) - success
|
|
FreeBSD (2.2.5-RELEASE) - success
|
|
alpha-cc [engine] (OSF1 5.0A) - success
|
|
irix-mips3-cc [engine] (Irix 6.2) - success
|
|
One has to do the same as for OpenBSD in
|
|
speed.c [FIXED]
|
|
aix-cc (3.2.5, cc 1.3.0.44) - success
|
|
aix-gcc (3.2.5, gcc 2.8.1) - success
|
|
Both first failed to compiled due to ftime().
|
|
[FIXED]
|
|
alpha-cc (V4.0E) - success
|
|
alpha-gcc (V4.0E, gcc 2.8.1) - success
|
|
ultrix-cc (V4.5) - success
|
|
ultrix-gcc (V4.5, gcc 2.8.1) - success
|
|
0.9.6-beta3 is available:
|
|
aix-cc (4.3) - success
|
|
aix-cc [engine] (4.3) - success
|
|
linux-elf (RedHat 5.2, gcc 2.7.2.3) - success
|
|
linux-elf (RedHat 6.2) - success
|
|
linux-elf [engine] (RedHat 6.2) - success
|
|
solaris-sparcv9-gcc (5.7, gcc 2.95.2) - success
|
|
solaris-sparcv9-gcc (5.6, gcc 2.95.2) - success
|
|
solaris-sparcv9-cc (5.6, SunWS C 4.2) - success
|
|
solaris-sparcv9-cc [engine] (5.6, SunWS C 4.2)- success
|
|
VC-WIN32 (NT4 SP6, VC6 SP2) - success
|
|
VC-WIN32 (NT4 SP6, Cygwin) - success
|
|
The files used for testing must have CR/LF
|
|
as line endings.
|
|
VC-WIN32 (NT4 SP6, Mingw32) - failed
|
|
mingw32a.mak contains a few lines that
|
|
generate an error.
|
|
VC-NT static libs (NT4 SP6, VC6 SP4) - failed
|
|
Complains about unresolved external symbol
|
|
__imp__RegQueryValueEx. This only
|
|
happens when building the static
|
|
libraries. Tests pass as soon as
|
|
you make sure advapi32.lib gets
|
|
liked in.
|
|
VC-WIN32 (W2K Pro SP1, VC6 SP3, PSDK Jul2000)- success
|
|
hpux-parisc-gcc (B.10.20, gcc 2.95.2) - success
|
|
hpux-parisc-cc (B.10.20, cc A.10.32.30) - success
|
|
hpux-parisc-gcc [engine] (B.10.20, gcc 2.95.2)- success
|
|
hpux-parisc-cc [engine] (B.10.20, cc A.10.32.30)- success
|
|
o OpenSSL 0.9.5a: Released on April 1st, 2000
|
|
o OpenSSL 0.9.5: Released on February 28th, 2000
|
|
o OpenSSL 0.9.4: Released on August 09th, 1999
|
|
o OpenSSL 0.9.3a: Released on May 29th, 1999
|
|
o OpenSSL 0.9.3: Released on May 25th, 1999
|
|
o OpenSSL 0.9.2b: Released on March 22th, 1999
|
|
o OpenSSL 0.9.1c: Released on December 23th, 1998
|
|
|
|
RELEASE SHOWSTOPPERS
|
|
|
|
AVAILABLE PATCHES
|
|
|
|
o CA.pl patch (Damien Miller)
|
|
|
|
IN PROGRESS
|
|
|
|
o Steve is currently working on (in no particular order):
|
|
ASN1 code redesign, butchery, replacement.
|
|
EVP cipher enhancement.
|
|
Proper (or at least usable) certificate chain verification.
|
|
Private key, certificate and CRL API and implementation.
|
|
Developing and bugfixing PKCS#7 (S/MIME code).
|
|
Various X509 issues: character sets, certificate request extensions.
|
|
o Geoff and Richard are currently working on:
|
|
ENGINE (the new code that gives hardware support among others).
|
|
o Richard is currently working on:
|
|
UTIL (a new set of library functions to support some higher level
|
|
functionality that is currently missing).
|
|
Dynamic thread-lock support.
|
|
Shared library support for VMS.
|
|
|
|
NEEDS PATCH
|
|
|
|
o non-blocking socket on AIX
|
|
o $(PERL) in */Makefile.ssl
|
|
o "Sign the certificate?" - "n" creates empty certificate file
|
|
|
|
OPEN ISSUES
|
|
|
|
o internal_verify doesn't know about X509.v3 (basicConstraints
|
|
CA flag ...)
|
|
|
|
o The Makefile hierarchy and build mechanism is still not a round thing:
|
|
|
|
1. The config vs. Configure scripts
|
|
It's the same nasty situation as for Apache with APACI vs.
|
|
src/Configure. It confuses.
|
|
Suggestion: Merge Configure and config into a single configure
|
|
script with a Autoconf style interface ;-) and remove
|
|
Configure and config. Or even let us use GNU Autoconf
|
|
itself. Then we can avoid a lot of those platform checks
|
|
which are currently in Configure.
|
|
|
|
o Support for Shared Libraries has to be added at least
|
|
for the major Unix platforms. The details we can rip from the stuff
|
|
Ralf has done for the Apache src/Configure script. Ben wants the
|
|
solution to be really simple.
|
|
|
|
Status: Ralf will look how we can easily incorporate the
|
|
compiler PIC and linker DSO flags from Apache
|
|
into the OpenSSL Configure script.
|
|
|
|
Ulf: +1 for using GNU autoconf and libtool (but not automake,
|
|
which apparently is not flexible enough to generate
|
|
libcrypto)
|
|
|
|
|
|
o The perl/ stuff needs a major overhaul. Currently it's
|
|
totally obsolete. Either we clean it up and enhance it to be up-to-date
|
|
with the C code or we also could replace it with the really nice
|
|
Net::SSLeay package we can find under
|
|
http://www.neuronio.pt/SSLeay.pm.html. Ralf uses this package for a
|
|
longer time and it works fine and is a nice Perl module. Best would be
|
|
to convince the author to work for the OpenSSL project and create a
|
|
Net::OpenSSL or Crypt::OpenSSL package out of it and maintains it for
|
|
us.
|
|
|
|
Status: Ralf thinks we should both contact the author of Net::SSLeay
|
|
and look how much effort it is to bring Eric's perl/ stuff up
|
|
to date.
|
|
Paul +1
|
|
|
|
WISHES
|
|
|
|
o
|