Ralf S. Engelschall | 75b8dfc | 1998-12-30 09:08:05 +0000 | [diff] [blame] | 1 | |
| 2 | OpenSSL STATUS Last modified at |
Bodo Möller | fe14ee9 | 2003-02-28 15:17:45 +0000 | [diff] [blame] | 3 | ______________ $Date: 2003/02/28 15:17:45 $ |
Ralf S. Engelschall | 75b8dfc | 1998-12-30 09:08:05 +0000 | [diff] [blame] | 4 | |
| 5 | DEVELOPMENT STATE |
| 6 | |
Lutz Jänicke | 010da5c | 2002-06-01 15:33:36 +0000 | [diff] [blame] | 7 | o OpenSSL 0.9.8: Under development... |
Richard Levitte | d8cbc93 | 2003-02-19 14:02:37 +0000 | [diff] [blame] | 8 | o OpenSSL 0.9.7a: Released on February 19th, 2003 |
Richard Levitte | 08101d7 | 2002-12-30 23:56:09 +0000 | [diff] [blame] | 9 | o OpenSSL 0.9.7: Released on December 31st, 2002 |
Richard Levitte | d8cbc93 | 2003-02-19 14:02:37 +0000 | [diff] [blame] | 10 | o OpenSSL 0.9.6i: Released on February 19th, 2003 |
Richard Levitte | 43ecece | 2002-12-05 21:50:13 +0000 | [diff] [blame] | 11 | o OpenSSL 0.9.6h: Released on December 5th, 2002 |
Richard Levitte | 3696908 | 2002-08-12 06:54:54 +0000 | [diff] [blame] | 12 | o OpenSSL 0.9.6g: Released on August 9th, 2002 |
Richard Levitte | fbe792f | 2002-08-08 22:55:28 +0000 | [diff] [blame] | 13 | o OpenSSL 0.9.6f: Released on August 8th, 2002 |
Lutz Jänicke | b218af2 | 2002-07-30 11:32:47 +0000 | [diff] [blame] | 14 | o OpenSSL 0.9.6e: Released on July 30th, 2002 |
Richard Levitte | 336c35d | 2002-05-09 23:54:02 +0000 | [diff] [blame] | 15 | o OpenSSL 0.9.6d: Released on May 9th, 2002 |
Richard Levitte | 84fcd6f | 2001-12-21 03:23:15 +0000 | [diff] [blame] | 16 | o OpenSSL 0.9.6c: Released on December 21st, 2001 |
Andy Polyakov | 6b46ca1 | 2001-07-17 14:39:26 +0000 | [diff] [blame] | 17 | o OpenSSL 0.9.6b: Released on July 9th, 2001 |
Bodo Möller | 4d231b4 | 2001-04-09 07:15:16 +0000 | [diff] [blame] | 18 | o OpenSSL 0.9.6a: Released on April 5th, 2001 |
Richard Levitte | 1622117 | 2000-09-24 15:42:34 +0000 | [diff] [blame] | 19 | o OpenSSL 0.9.6: Released on September 24th, 2000 |
| 20 | o OpenSSL 0.9.5a: Released on April 1st, 2000 |
| 21 | o OpenSSL 0.9.5: Released on February 28th, 2000 |
| 22 | o OpenSSL 0.9.4: Released on August 09th, 1999 |
| 23 | o OpenSSL 0.9.3a: Released on May 29th, 1999 |
| 24 | o OpenSSL 0.9.3: Released on May 25th, 1999 |
| 25 | o OpenSSL 0.9.2b: Released on March 22th, 1999 |
| 26 | o OpenSSL 0.9.1c: Released on December 23th, 1998 |
Ralf S. Engelschall | 75b8dfc | 1998-12-30 09:08:05 +0000 | [diff] [blame] | 27 | |
Lutz Jänicke | c0a9536 | 2002-05-16 10:01:53 +0000 | [diff] [blame] | 28 | [See also http://www.openssl.org/support/rt2.html] |
Bodo Möller | 0424fe1 | 2002-05-16 09:28:09 +0000 | [diff] [blame] | 29 | |
Ralf S. Engelschall | 75b8dfc | 1998-12-30 09:08:05 +0000 | [diff] [blame] | 30 | RELEASE SHOWSTOPPERS |
| 31 | |
Bodo Möller | fe14ee9 | 2003-02-28 15:17:45 +0000 | [diff] [blame] | 32 | o |
Richard Levitte | 364ff36 | 2002-11-21 22:39:08 +0000 | [diff] [blame] | 33 | |
Ralf S. Engelschall | 75b8dfc | 1998-12-30 09:08:05 +0000 | [diff] [blame] | 34 | AVAILABLE PATCHES |
| 35 | |
Bodo Möller | 0b0b2a8 | 2001-11-14 21:21:47 +0000 | [diff] [blame] | 36 | o |
Andy Polyakov | 6b46ca1 | 2001-07-17 14:39:26 +0000 | [diff] [blame] | 37 | |
Ralf S. Engelschall | 75b8dfc | 1998-12-30 09:08:05 +0000 | [diff] [blame] | 38 | IN PROGRESS |
| 39 | |
Dr. Stephen Henson | 67d5ac0 | 1999-03-29 00:19:55 +0000 | [diff] [blame] | 40 | o Steve is currently working on (in no particular order): |
Dr. Stephen Henson | 75c4f7e | 2000-07-02 21:11:11 +0000 | [diff] [blame] | 41 | ASN1 code redesign, butchery, replacement. |
Dr. Stephen Henson | 36f554d | 2000-12-13 18:21:51 +0000 | [diff] [blame] | 42 | OCSP |
Dr. Stephen Henson | 7f06060 | 2000-05-26 23:51:35 +0000 | [diff] [blame] | 43 | EVP cipher enhancement. |
Dr. Stephen Henson | 36f554d | 2000-12-13 18:21:51 +0000 | [diff] [blame] | 44 | Enhanced certificate chain verification. |
Dr. Stephen Henson | 1d48dd0 | 1999-04-16 23:57:04 +0000 | [diff] [blame] | 45 | Private key, certificate and CRL API and implementation. |
Dr. Stephen Henson | 5a9a4b2 | 1999-12-05 00:40:59 +0000 | [diff] [blame] | 46 | Developing and bugfixing PKCS#7 (S/MIME code). |
Dr. Stephen Henson | 87c49f6 | 1999-08-09 22:38:05 +0000 | [diff] [blame] | 47 | Various X509 issues: character sets, certificate request extensions. |
Richard Levitte | 1e55286 | 2000-06-14 17:27:02 +0000 | [diff] [blame] | 48 | o Geoff and Richard are currently working on: |
| 49 | ENGINE (the new code that gives hardware support among others). |
| 50 | o Richard is currently working on: |
Richard Levitte | b8ffcf4 | 2001-06-20 15:11:15 +0000 | [diff] [blame] | 51 | UI (User Interface) |
Richard Levitte | 1e55286 | 2000-06-14 17:27:02 +0000 | [diff] [blame] | 52 | UTIL (a new set of library functions to support some higher level |
| 53 | functionality that is currently missing). |
Richard Levitte | 79d2eb6 | 2000-09-07 08:14:46 +0000 | [diff] [blame] | 54 | Shared library support for VMS. |
Richard Levitte | 4c3a2b4 | 2002-12-07 20:02:20 +0000 | [diff] [blame] | 55 | Kerberos 5 authentication (Heimdal) |
Richard Levitte | 257341b | 2000-11-19 14:11:03 +0000 | [diff] [blame] | 56 | Constification |
Richard Levitte | b114057 | 2002-12-07 20:03:42 +0000 | [diff] [blame] | 57 | Compression |
Richard Levitte | 4c3a2b4 | 2002-12-07 20:02:20 +0000 | [diff] [blame] | 58 | Attribute Certificate support |
| 59 | Certificate Pair support |
| 60 | Storage Engines (primarly an LDAP storage engine) |
Richard Levitte | f60e660 | 2002-12-12 19:40:55 +0000 | [diff] [blame] | 61 | Certificate chain validation with full RFC 3280 compatibility |
Dr. Stephen Henson | 679ab7c | 1999-01-30 17:35:01 +0000 | [diff] [blame] | 62 | |
Ralf S. Engelschall | 75b8dfc | 1998-12-30 09:08:05 +0000 | [diff] [blame] | 63 | NEEDS PATCH |
| 64 | |
Bodo Möller | 749d055 | 2002-08-14 11:07:29 +0000 | [diff] [blame] | 65 | o 0.9.8-dev: COMPLEMENTOFALL and COMPLEMENTOFDEFAULT do not |
| 66 | handle ECCdraft cipher suites correctly. |
| 67 | |
Bodo Möller | 91b842c | 2001-01-10 16:25:12 +0000 | [diff] [blame] | 68 | o apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file |
Ulf Möller | acafc0b | 1999-04-08 20:45:53 +0000 | [diff] [blame] | 69 | |
Bodo Möller | 2cb924b | 2001-09-11 12:20:20 +0000 | [diff] [blame] | 70 | o "OpenSSL STATUS" is never up-to-date. |
Bodo Möller | 40753f7 | 2001-01-11 13:33:10 +0000 | [diff] [blame] | 71 | |
Bodo Möller | 2cb924b | 2001-09-11 12:20:20 +0000 | [diff] [blame] | 72 | OPEN ISSUES |
Bodo Möller | a14280d | 2001-01-10 16:37:35 +0000 | [diff] [blame] | 73 | |
Ralf S. Engelschall | 2ec077d | 1999-01-02 16:28:51 +0000 | [diff] [blame] | 74 | o The Makefile hierarchy and build mechanism is still not a round thing: |
| 75 | |
| 76 | 1. The config vs. Configure scripts |
| 77 | It's the same nasty situation as for Apache with APACI vs. |
| 78 | src/Configure. It confuses. |
| 79 | Suggestion: Merge Configure and config into a single configure |
| 80 | script with a Autoconf style interface ;-) and remove |
| 81 | Configure and config. Or even let us use GNU Autoconf |
| 82 | itself. Then we can avoid a lot of those platform checks |
| 83 | which are currently in Configure. |
| 84 | |
Ralf S. Engelschall | a6f20a1 | 1998-12-31 12:14:27 +0000 | [diff] [blame] | 85 | o Support for Shared Libraries has to be added at least |
| 86 | for the major Unix platforms. The details we can rip from the stuff |
| 87 | Ralf has done for the Apache src/Configure script. Ben wants the |
| 88 | solution to be really simple. |
| 89 | |
| 90 | Status: Ralf will look how we can easily incorporate the |
| 91 | compiler PIC and linker DSO flags from Apache |
| 92 | into the OpenSSL Configure script. |
| 93 | |
Ulf Möller | eb02599 | 1999-09-21 17:19:05 +0000 | [diff] [blame] | 94 | Ulf: +1 for using GNU autoconf and libtool (but not automake, |
| 95 | which apparently is not flexible enough to generate |
| 96 | libcrypto) |
| 97 | |
Ralf S. Engelschall | 69d1dfb | 1999-01-21 13:01:20 +0000 | [diff] [blame] | 98 | WISHES |
| 99 | |
Bodo Möller | 182d843 | 2002-02-09 01:49:53 +0000 | [diff] [blame] | 100 | o Add variants of DH_generate_parameters() and BN_generate_prime() [etc?] |
| 101 | where the callback function can request that the function be aborted. |
| 102 | [Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>] |
| 103 | |
Richard Levitte | 27bfba2 | 2001-06-04 06:51:43 +0000 | [diff] [blame] | 104 | o SRP in TLS. |
Richard Levitte | 528f6b8 | 2001-06-04 16:23:15 +0000 | [diff] [blame] | 105 | [wished by: |
| 106 | Dj <derek@yo.net>, Tom Wu <tom@arcot.com>, |
| 107 | Tom Holroyd <tomh@po.crl.go.jp>] |
| 108 | |
Richard Levitte | 27bfba2 | 2001-06-04 06:51:43 +0000 | [diff] [blame] | 109 | See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt |
| 110 | as well as http://www-cs-students.stanford.edu/~tjw/srp/. |
Richard Levitte | 528f6b8 | 2001-06-04 16:23:15 +0000 | [diff] [blame] | 111 | |
| 112 | Tom Holroyd tells us there is a SRP patch for OpenSSH at |
| 113 | http://members.tripod.com/professor_tom/archives/, that could |
| 114 | be useful. |