diff options
| author | Brent Cook <busterb@gmail.com> | 2023-03-15 22:01:22 -0500 |
|---|---|---|
| committer | Brent Cook <busterb@gmail.com> | 2023-03-15 22:01:22 -0500 |
| commit | ab7e90a209b734622f6f968ad7be258636a9b9e8 (patch) | |
| tree | eb83786a257d7e1fb5ed11644b2e0efe3d74cd69 | |
| parent | ce4536684c9b3d82c99318da257525c0e651983b (diff) | |
| download | portable-ab7e90a209b734622f6f968ad7be258636a9b9e8.tar.gz portable-ab7e90a209b734622f6f968ad7be258636a9b9e8.tar.bz2 portable-ab7e90a209b734622f6f968ad7be258636a9b9e8.zip | |
fix more formatting and remove redundancy
| -rw-r--r-- | ChangeLog | 63 |
1 files changed, 31 insertions, 32 deletions
| @@ -28,7 +28,6 @@ history is also available from Git. | |||
| 28 | 28 | ||
| 29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
| 30 | 30 | ||
| 31 | <<<<<<< HEAD | ||
| 32 | 3.7.1 - Development release | 31 | 3.7.1 - Development release |
| 33 | 32 | ||
| 34 | * Internal improvements | 33 | * Internal improvements |
| @@ -38,69 +37,69 @@ LibreSSL Portable Release Notes: | |||
| 38 | - Imported s2n-bignum's constant time assembly primitives. | 37 | - Imported s2n-bignum's constant time assembly primitives. |
| 39 | Use them for amd64 and arm64. | 38 | Use them for amd64 and arm64. |
| 40 | - Lots of cleanup, simplification and bug fixes | 39 | - Lots of cleanup, simplification and bug fixes |
| 41 | - Assorted initial cleanup in the EC code | ||
| 42 | - Fixed Perl assembly generators to move constants into .rodata. | 40 | - Fixed Perl assembly generators to move constants into .rodata. |
| 43 | This allows code to run with execute-only permissions | 41 | This allows code to run with execute-only permissions. |
| 44 | - ASN1 parsing rework and improvements | 42 | - ASN1 parsing rework and improvements |
| 45 | - Make UI_destroy_method() NULL safe. | 43 | - Make UI_destroy_method() NULL safe. |
| 46 | - Various improvements to nc | 44 | - Various improvements to nc |
| 47 | - Call CRYPTO_cleanup_all_ex_data() from OPENSSL_cleanup(). | 45 | - Call CRYPTO_cleanup_all_ex_data() from OPENSSL_cleanup(). |
| 48 | - Various internal EC improvements. | 46 | - Cap the number of iterations in ECDSA signing,DSA signing, and other |
| 49 | - Various openssl(1) improvements. | 47 | DSA sanity checks. |
| 50 | - Cap the number of iterations in ECDSA signing | ||
| 51 | - Cap the number of iterations in DSA signing, and other DSA sanity checks. | ||
| 52 | - Always clear EC groups and points on free. | 48 | - Always clear EC groups and points on free. |
| 53 | - Various other internal cleanups | 49 | - Cleanup and improvements in EC code |
| 50 | - Various openssl(1) improvements. | ||
| 54 | * Bug fixes | 51 | * Bug fixes |
| 55 | - Fixed a memory leak, a double free and various other issues in | 52 | - Fixed a memory leak, a double free and various other issues in |
| 56 | BIO_new_NDEF() | 53 | BIO_new_NDEF() |
| 57 | - Avoid infinite loops in DSA and ECDSA signing | 54 | - Avoid infinite loops in DSA and ECDSA signing. |
| 58 | - Check DSA parameter sanity | 55 | - Check DSA parameter sanity |
| 59 | - Fixed various crashes in the openssl(1) testing utility | 56 | - Fixed various crashes in the openssl(1) testing utility. |
| 60 | - Do not check policies by default in the new X.509 verifier | 57 | - Do not check policies by default in the new X.509 verifier. |
| 61 | - Avoid -0 in BN_div_word(). | 58 | - Avoid -0 in BN_div_word(). |
| 62 | - Fix an off-by-one in dsa_check_key() | 59 | - Fix an off-by-one in dsa_check_key(). |
| 63 | - openssl(1) asn1parse: avoid crash with ASN.1 BOOLEANS | 60 | - Avoid crash with ASN.1 BOOLEANS in openssl(1) asn1parse. |
| 64 | - Add missing error checking in PKCS7 | 61 | - Add missing error checking in PKCS7. |
| 65 | * Compatibility changes | 62 | * Compatibility changes |
| 66 | - correct the prototypes of BIO_get_conn_ip(3) and BIO_get_conn_int_port(3) | 63 | - Correct the prototypes of BIO_get_conn_ip(3) and |
| 64 | BIO_get_conn_int_port(3). | ||
| 67 | - Provide UI_null() | 65 | - Provide UI_null() |
| 68 | - Expose various X509_STORE_*check_issued() | 66 | - Expose various X509_STORE_*check_issued() |
| 69 | - Expose X509_CRL_get0_sigalg() and X509_get0_uids | 67 | - Expose X509_CRL_get0_sigalg() and X509_get0_uids |
| 70 | - Expose the EVP_CIPHER_meth_* API (setter only) in evp.h | 68 | - Expose the EVP_CIPHER_meth_* API (setter only) in evp.h |
| 71 | - Introduce X509_get0_uids() accessor function | 69 | - Introduce X509_get0_uids() accessor function |
| 72 | * Documentation improvements | 70 | * Documentation improvements |
| 73 | - Mark BIO_s_log(3) BIO_nread0(3), BIO_nread(3), BIO_nwrite0(3), BIO_nwrite(3), | 71 | - Mark BIO_s_log(3) BIO_nread0(3), BIO_nread(3), BIO_nwrite0(3), BIO_nwrite(3), |
| 74 | BIO_dump_cb(3) and BIO_dump_indent_cb(3) as intentionally undocumented. | 72 | BIO_dump_cb(3) and BIO_dump_indent_cb(3) as intentionally undocumented. |
| 75 | - Document BIO_number_read(3) and BIO_number_written(3) | ||
| 76 | - Merge documentation of UI_null() from OpenSSL 1.1 | 73 | - Merge documentation of UI_null() from OpenSSL 1.1 |
| 77 | - Document BIO_set_retry_read(3), BIO_set_retry_write(3), BIO_set_retry_special(3), | 74 | - Document BIO_number_read(3), BIO_number_written(3), |
| 78 | BIO_clear_retry_flags(3), BIO_get_retry_flags(3), and the BIO_FLAGS_* constants | 75 | BIO_set_retry_read(3), BIO_set_retry_write(3), |
| 79 | - Document BIO_dup_chain(3). | 76 | BIO_set_retry_special(3), BIO_clear_retry_flags(3), |
| 80 | - Document BIO_set_flags(3), BIO_clear_flags(3), BIO_test_flags(3), and BIO_get_flags(3). | 77 | BIO_get_retry_flags(3), BIO_dup_chain(3), BIO_set_flags(3), |
| 81 | - Document BIO_callback_fn_ex(3), BIO_set_callback_ex(3), BIO_get_callback_ex(3), | 78 | BIO_clear_flags(3), BIO_test_flags(3), BIO_get_flags(3). |
| 82 | and BIO_callback_fn(3). | 79 | BIO_callback_fn_ex(3), BIO_set_callback_ex(3), BIO_get_callback_ex(3), |
| 80 | BIO_callback_fn(3), and the BIO_FLAGS_* constants | ||
| 83 | - Document ED25519_keypair(3), ED25519_sign(3), and ED25519_verify(3). | 81 | - Document ED25519_keypair(3), ED25519_sign(3), and ED25519_verify(3). |
| 84 | - Document EVP_PKEY_new_raw_private_key(3), EVP_PKEY_new_raw_public_key(3), | 82 | - Document EVP_PKEY_new_raw_private_key(3), |
| 85 | EVP_PKEY_get_raw_private_key(3), and EVP_PKEY_get_raw_public_key(3). | 83 | EVP_PKEY_new_raw_public_key(3), EVP_PKEY_get_raw_private_key(3), and |
| 84 | EVP_PKEY_get_raw_public_key(3). | ||
| 86 | - Document ASN1_buf_print(3). | 85 | - Document ASN1_buf_print(3). |
| 87 | - Document ED25519_keypair(3), ED25519_sign(3), and ED25519_verify(3). | ||
| 88 | - Document ECDSA_SIG_get0_{r,s}(). | 86 | - Document ECDSA_SIG_get0_{r,s}(). |
| 89 | - Document DH_get0_* for individual DH members. | 87 | - Document DH_get0_* for individual DH members. |
| 90 | - Document DSA_get0_* for individual DSA members | 88 | - Document DSA_get0_* for individual DSA members |
| 91 | - Document RSA_get0_* for individual RSA members. | 89 | - Document RSA_get0_* for individual RSA members. |
| 92 | - Various spelling and other documentation improvements. | 90 | - Various spelling and other documentation improvements. |
| 93 | * Testing and Proactive Security | 91 | * Testing and Proactive Security |
| 94 | - As always, new test coverage is added as bugs are fixed and | 92 | - As always, new test coverage is added as bugs are fixed and subsystems |
| 95 | subsystems are cleaned up | 93 | are cleaned up |
| 96 | - New Wycheproof tests added. | 94 | - New Wycheproof tests added. |
| 97 | - OpenSSL 3.0 Interop tests added. | 95 | - OpenSSL 3.0 Interop tests added. |
| 98 | - Many old tests rewritten, cleaned up and extended. | 96 | - Many old tests rewritten, cleaned up and extended. |
| 99 | * Security fix | 97 | * Security fix |
| 100 | - A malicious certificate revocation list or timestamp response token | 98 | - A malicious certificate revocation list or timestamp response token |
| 101 | would allow an attacker to read arbitrary memory. | 99 | would allow an attacker to read arbitrary memory. |
| 102 | 100 | ||
| 103 | 3.7.0 - Development release | 101 | 3.7.0 - Development release |
| 102 | |||
| 104 | * Internal improvements | 103 | * Internal improvements |
| 105 | - Remove dependency on system timegm() and gmtime() by replacing | 104 | - Remove dependency on system timegm() and gmtime() by replacing |
| 106 | traditional Julian date conversion with POSIX epoch-seconds date | 105 | traditional Julian date conversion with POSIX epoch-seconds date |
