diff options
author | Brent Cook <busterb@gmail.com> | 2023-03-15 22:01:22 -0500 |
---|---|---|
committer | Brent Cook <busterb@gmail.com> | 2023-03-15 22:01:22 -0500 |
commit | ab7e90a209b734622f6f968ad7be258636a9b9e8 (patch) | |
tree | eb83786a257d7e1fb5ed11644b2e0efe3d74cd69 | |
parent | ce4536684c9b3d82c99318da257525c0e651983b (diff) | |
download | portable-ab7e90a209b734622f6f968ad7be258636a9b9e8.tar.gz portable-ab7e90a209b734622f6f968ad7be258636a9b9e8.tar.bz2 portable-ab7e90a209b734622f6f968ad7be258636a9b9e8.zip |
fix more formatting and remove redundancy
-rw-r--r-- | ChangeLog | 63 |
1 files changed, 31 insertions, 32 deletions
@@ -28,7 +28,6 @@ history is also available from Git. | |||
28 | 28 | ||
29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
30 | 30 | ||
31 | <<<<<<< HEAD | ||
32 | 3.7.1 - Development release | 31 | 3.7.1 - Development release |
33 | 32 | ||
34 | * Internal improvements | 33 | * Internal improvements |
@@ -38,69 +37,69 @@ LibreSSL Portable Release Notes: | |||
38 | - Imported s2n-bignum's constant time assembly primitives. | 37 | - Imported s2n-bignum's constant time assembly primitives. |
39 | Use them for amd64 and arm64. | 38 | Use them for amd64 and arm64. |
40 | - Lots of cleanup, simplification and bug fixes | 39 | - Lots of cleanup, simplification and bug fixes |
41 | - Assorted initial cleanup in the EC code | ||
42 | - Fixed Perl assembly generators to move constants into .rodata. | 40 | - Fixed Perl assembly generators to move constants into .rodata. |
43 | This allows code to run with execute-only permissions | 41 | This allows code to run with execute-only permissions. |
44 | - ASN1 parsing rework and improvements | 42 | - ASN1 parsing rework and improvements |
45 | - Make UI_destroy_method() NULL safe. | 43 | - Make UI_destroy_method() NULL safe. |
46 | - Various improvements to nc | 44 | - Various improvements to nc |
47 | - Call CRYPTO_cleanup_all_ex_data() from OPENSSL_cleanup(). | 45 | - Call CRYPTO_cleanup_all_ex_data() from OPENSSL_cleanup(). |
48 | - Various internal EC improvements. | 46 | - Cap the number of iterations in ECDSA signing,DSA signing, and other |
49 | - Various openssl(1) improvements. | 47 | DSA sanity checks. |
50 | - Cap the number of iterations in ECDSA signing | ||
51 | - Cap the number of iterations in DSA signing, and other DSA sanity checks. | ||
52 | - Always clear EC groups and points on free. | 48 | - Always clear EC groups and points on free. |
53 | - Various other internal cleanups | 49 | - Cleanup and improvements in EC code |
50 | - Various openssl(1) improvements. | ||
54 | * Bug fixes | 51 | * Bug fixes |
55 | - Fixed a memory leak, a double free and various other issues in | 52 | - Fixed a memory leak, a double free and various other issues in |
56 | BIO_new_NDEF() | 53 | BIO_new_NDEF() |
57 | - Avoid infinite loops in DSA and ECDSA signing | 54 | - Avoid infinite loops in DSA and ECDSA signing. |
58 | - Check DSA parameter sanity | 55 | - Check DSA parameter sanity |
59 | - Fixed various crashes in the openssl(1) testing utility | 56 | - Fixed various crashes in the openssl(1) testing utility. |
60 | - Do not check policies by default in the new X.509 verifier | 57 | - Do not check policies by default in the new X.509 verifier. |
61 | - Avoid -0 in BN_div_word(). | 58 | - Avoid -0 in BN_div_word(). |
62 | - Fix an off-by-one in dsa_check_key() | 59 | - Fix an off-by-one in dsa_check_key(). |
63 | - openssl(1) asn1parse: avoid crash with ASN.1 BOOLEANS | 60 | - Avoid crash with ASN.1 BOOLEANS in openssl(1) asn1parse. |
64 | - Add missing error checking in PKCS7 | 61 | - Add missing error checking in PKCS7. |
65 | * Compatibility changes | 62 | * Compatibility changes |
66 | - correct the prototypes of BIO_get_conn_ip(3) and BIO_get_conn_int_port(3) | 63 | - Correct the prototypes of BIO_get_conn_ip(3) and |
64 | BIO_get_conn_int_port(3). | ||
67 | - Provide UI_null() | 65 | - Provide UI_null() |
68 | - Expose various X509_STORE_*check_issued() | 66 | - Expose various X509_STORE_*check_issued() |
69 | - Expose X509_CRL_get0_sigalg() and X509_get0_uids | 67 | - Expose X509_CRL_get0_sigalg() and X509_get0_uids |
70 | - Expose the EVP_CIPHER_meth_* API (setter only) in evp.h | 68 | - Expose the EVP_CIPHER_meth_* API (setter only) in evp.h |
71 | - Introduce X509_get0_uids() accessor function | 69 | - Introduce X509_get0_uids() accessor function |
72 | * Documentation improvements | 70 | * Documentation improvements |
73 | - Mark BIO_s_log(3) BIO_nread0(3), BIO_nread(3), BIO_nwrite0(3), BIO_nwrite(3), | 71 | - Mark BIO_s_log(3) BIO_nread0(3), BIO_nread(3), BIO_nwrite0(3), BIO_nwrite(3), |
74 | BIO_dump_cb(3) and BIO_dump_indent_cb(3) as intentionally undocumented. | 72 | BIO_dump_cb(3) and BIO_dump_indent_cb(3) as intentionally undocumented. |
75 | - Document BIO_number_read(3) and BIO_number_written(3) | ||
76 | - Merge documentation of UI_null() from OpenSSL 1.1 | 73 | - Merge documentation of UI_null() from OpenSSL 1.1 |
77 | - Document BIO_set_retry_read(3), BIO_set_retry_write(3), BIO_set_retry_special(3), | 74 | - Document BIO_number_read(3), BIO_number_written(3), |
78 | BIO_clear_retry_flags(3), BIO_get_retry_flags(3), and the BIO_FLAGS_* constants | 75 | BIO_set_retry_read(3), BIO_set_retry_write(3), |
79 | - Document BIO_dup_chain(3). | 76 | BIO_set_retry_special(3), BIO_clear_retry_flags(3), |
80 | - Document BIO_set_flags(3), BIO_clear_flags(3), BIO_test_flags(3), and BIO_get_flags(3). | 77 | BIO_get_retry_flags(3), BIO_dup_chain(3), BIO_set_flags(3), |
81 | - Document BIO_callback_fn_ex(3), BIO_set_callback_ex(3), BIO_get_callback_ex(3), | 78 | BIO_clear_flags(3), BIO_test_flags(3), BIO_get_flags(3). |
82 | and BIO_callback_fn(3). | 79 | BIO_callback_fn_ex(3), BIO_set_callback_ex(3), BIO_get_callback_ex(3), |
80 | BIO_callback_fn(3), and the BIO_FLAGS_* constants | ||
83 | - Document ED25519_keypair(3), ED25519_sign(3), and ED25519_verify(3). | 81 | - Document ED25519_keypair(3), ED25519_sign(3), and ED25519_verify(3). |
84 | - Document EVP_PKEY_new_raw_private_key(3), EVP_PKEY_new_raw_public_key(3), | 82 | - Document EVP_PKEY_new_raw_private_key(3), |
85 | EVP_PKEY_get_raw_private_key(3), and EVP_PKEY_get_raw_public_key(3). | 83 | EVP_PKEY_new_raw_public_key(3), EVP_PKEY_get_raw_private_key(3), and |
84 | EVP_PKEY_get_raw_public_key(3). | ||
86 | - Document ASN1_buf_print(3). | 85 | - Document ASN1_buf_print(3). |
87 | - Document ED25519_keypair(3), ED25519_sign(3), and ED25519_verify(3). | ||
88 | - Document ECDSA_SIG_get0_{r,s}(). | 86 | - Document ECDSA_SIG_get0_{r,s}(). |
89 | - Document DH_get0_* for individual DH members. | 87 | - Document DH_get0_* for individual DH members. |
90 | - Document DSA_get0_* for individual DSA members | 88 | - Document DSA_get0_* for individual DSA members |
91 | - Document RSA_get0_* for individual RSA members. | 89 | - Document RSA_get0_* for individual RSA members. |
92 | - Various spelling and other documentation improvements. | 90 | - Various spelling and other documentation improvements. |
93 | * Testing and Proactive Security | 91 | * Testing and Proactive Security |
94 | - As always, new test coverage is added as bugs are fixed and | 92 | - As always, new test coverage is added as bugs are fixed and subsystems |
95 | subsystems are cleaned up | 93 | are cleaned up |
96 | - New Wycheproof tests added. | 94 | - New Wycheproof tests added. |
97 | - OpenSSL 3.0 Interop tests added. | 95 | - OpenSSL 3.0 Interop tests added. |
98 | - Many old tests rewritten, cleaned up and extended. | 96 | - Many old tests rewritten, cleaned up and extended. |
99 | * Security fix | 97 | * Security fix |
100 | - A malicious certificate revocation list or timestamp response token | 98 | - A malicious certificate revocation list or timestamp response token |
101 | would allow an attacker to read arbitrary memory. | 99 | would allow an attacker to read arbitrary memory. |
102 | 100 | ||
103 | 3.7.0 - Development release | 101 | 3.7.0 - Development release |
102 | |||
104 | * Internal improvements | 103 | * Internal improvements |
105 | - Remove dependency on system timegm() and gmtime() by replacing | 104 | - Remove dependency on system timegm() and gmtime() by replacing |
106 | traditional Julian date conversion with POSIX epoch-seconds date | 105 | traditional Julian date conversion with POSIX epoch-seconds date |