blob: fe860ae309a24f3821f331b51bcc75df8e03434e [file] [log] [blame]
Ralf S. Engelschall75b8dfc1998-12-30 09:08:05 +00001
2 OpenSSL STATUS Last modified at
Bodo Möllerfe14ee92003-02-28 15:17:45 +00003 ______________ $Date: 2003/02/28 15:17:45 $
Ralf S. Engelschall75b8dfc1998-12-30 09:08:05 +00004
5 DEVELOPMENT STATE
6
Lutz Jänicke010da5c2002-06-01 15:33:36 +00007 o OpenSSL 0.9.8: Under development...
Richard Levitted8cbc932003-02-19 14:02:37 +00008 o OpenSSL 0.9.7a: Released on February 19th, 2003
Richard Levitte08101d72002-12-30 23:56:09 +00009 o OpenSSL 0.9.7: Released on December 31st, 2002
Richard Levitted8cbc932003-02-19 14:02:37 +000010 o OpenSSL 0.9.6i: Released on February 19th, 2003
Richard Levitte43ecece2002-12-05 21:50:13 +000011 o OpenSSL 0.9.6h: Released on December 5th, 2002
Richard Levitte36969082002-08-12 06:54:54 +000012 o OpenSSL 0.9.6g: Released on August 9th, 2002
Richard Levittefbe792f2002-08-08 22:55:28 +000013 o OpenSSL 0.9.6f: Released on August 8th, 2002
Lutz Jänickeb218af22002-07-30 11:32:47 +000014 o OpenSSL 0.9.6e: Released on July 30th, 2002
Richard Levitte336c35d2002-05-09 23:54:02 +000015 o OpenSSL 0.9.6d: Released on May 9th, 2002
Richard Levitte84fcd6f2001-12-21 03:23:15 +000016 o OpenSSL 0.9.6c: Released on December 21st, 2001
Andy Polyakov6b46ca12001-07-17 14:39:26 +000017 o OpenSSL 0.9.6b: Released on July 9th, 2001
Bodo Möller4d231b42001-04-09 07:15:16 +000018 o OpenSSL 0.9.6a: Released on April 5th, 2001
Richard Levitte16221172000-09-24 15:42:34 +000019 o OpenSSL 0.9.6: Released on September 24th, 2000
20 o OpenSSL 0.9.5a: Released on April 1st, 2000
21 o OpenSSL 0.9.5: Released on February 28th, 2000
22 o OpenSSL 0.9.4: Released on August 09th, 1999
23 o OpenSSL 0.9.3a: Released on May 29th, 1999
24 o OpenSSL 0.9.3: Released on May 25th, 1999
25 o OpenSSL 0.9.2b: Released on March 22th, 1999
26 o OpenSSL 0.9.1c: Released on December 23th, 1998
Ralf S. Engelschall75b8dfc1998-12-30 09:08:05 +000027
Lutz Jänickec0a95362002-05-16 10:01:53 +000028 [See also http://www.openssl.org/support/rt2.html]
Bodo Möller0424fe12002-05-16 09:28:09 +000029
Ralf S. Engelschall75b8dfc1998-12-30 09:08:05 +000030 RELEASE SHOWSTOPPERS
31
Bodo Möllerfe14ee92003-02-28 15:17:45 +000032 o
Richard Levitte364ff362002-11-21 22:39:08 +000033
Ralf S. Engelschall75b8dfc1998-12-30 09:08:05 +000034 AVAILABLE PATCHES
35
Bodo Möller0b0b2a82001-11-14 21:21:47 +000036 o
Andy Polyakov6b46ca12001-07-17 14:39:26 +000037
Ralf S. Engelschall75b8dfc1998-12-30 09:08:05 +000038 IN PROGRESS
39
Dr. Stephen Henson67d5ac01999-03-29 00:19:55 +000040 o Steve is currently working on (in no particular order):
Dr. Stephen Henson75c4f7e2000-07-02 21:11:11 +000041 ASN1 code redesign, butchery, replacement.
Dr. Stephen Henson36f554d2000-12-13 18:21:51 +000042 OCSP
Dr. Stephen Henson7f060602000-05-26 23:51:35 +000043 EVP cipher enhancement.
Dr. Stephen Henson36f554d2000-12-13 18:21:51 +000044 Enhanced certificate chain verification.
Dr. Stephen Henson1d48dd01999-04-16 23:57:04 +000045 Private key, certificate and CRL API and implementation.
Dr. Stephen Henson5a9a4b21999-12-05 00:40:59 +000046 Developing and bugfixing PKCS#7 (S/MIME code).
Dr. Stephen Henson87c49f61999-08-09 22:38:05 +000047 Various X509 issues: character sets, certificate request extensions.
Richard Levitte1e552862000-06-14 17:27:02 +000048 o Geoff and Richard are currently working on:
49 ENGINE (the new code that gives hardware support among others).
50 o Richard is currently working on:
Richard Levitteb8ffcf42001-06-20 15:11:15 +000051 UI (User Interface)
Richard Levitte1e552862000-06-14 17:27:02 +000052 UTIL (a new set of library functions to support some higher level
53 functionality that is currently missing).
Richard Levitte79d2eb62000-09-07 08:14:46 +000054 Shared library support for VMS.
Richard Levitte4c3a2b42002-12-07 20:02:20 +000055 Kerberos 5 authentication (Heimdal)
Richard Levitte257341b2000-11-19 14:11:03 +000056 Constification
Richard Levitteb1140572002-12-07 20:03:42 +000057 Compression
Richard Levitte4c3a2b42002-12-07 20:02:20 +000058 Attribute Certificate support
59 Certificate Pair support
60 Storage Engines (primarly an LDAP storage engine)
Richard Levittef60e6602002-12-12 19:40:55 +000061 Certificate chain validation with full RFC 3280 compatibility
Dr. Stephen Henson679ab7c1999-01-30 17:35:01 +000062
Ralf S. Engelschall75b8dfc1998-12-30 09:08:05 +000063 NEEDS PATCH
64
Bodo Möller749d0552002-08-14 11:07:29 +000065 o 0.9.8-dev: COMPLEMENTOFALL and COMPLEMENTOFDEFAULT do not
66 handle ECCdraft cipher suites correctly.
67
Bodo Möller91b842c2001-01-10 16:25:12 +000068 o apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
Ulf Mölleracafc0b1999-04-08 20:45:53 +000069
Bodo Möller2cb924b2001-09-11 12:20:20 +000070 o "OpenSSL STATUS" is never up-to-date.
Bodo Möller40753f72001-01-11 13:33:10 +000071
Bodo Möller2cb924b2001-09-11 12:20:20 +000072 OPEN ISSUES
Bodo Möllera14280d2001-01-10 16:37:35 +000073
Ralf S. Engelschall2ec077d1999-01-02 16:28:51 +000074 o The Makefile hierarchy and build mechanism is still not a round thing:
75
76 1. The config vs. Configure scripts
77 It's the same nasty situation as for Apache with APACI vs.
78 src/Configure. It confuses.
79 Suggestion: Merge Configure and config into a single configure
80 script with a Autoconf style interface ;-) and remove
81 Configure and config. Or even let us use GNU Autoconf
82 itself. Then we can avoid a lot of those platform checks
83 which are currently in Configure.
84
Ralf S. Engelschalla6f20a11998-12-31 12:14:27 +000085 o Support for Shared Libraries has to be added at least
86 for the major Unix platforms. The details we can rip from the stuff
87 Ralf has done for the Apache src/Configure script. Ben wants the
88 solution to be really simple.
89
90 Status: Ralf will look how we can easily incorporate the
91 compiler PIC and linker DSO flags from Apache
92 into the OpenSSL Configure script.
93
Ulf Möllereb025991999-09-21 17:19:05 +000094 Ulf: +1 for using GNU autoconf and libtool (but not automake,
95 which apparently is not flexible enough to generate
96 libcrypto)
97
Ralf S. Engelschall69d1dfb1999-01-21 13:01:20 +000098 WISHES
99
Bodo Möller182d8432002-02-09 01:49:53 +0000100 o Add variants of DH_generate_parameters() and BN_generate_prime() [etc?]
101 where the callback function can request that the function be aborted.
102 [Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>]
103
Richard Levitte27bfba22001-06-04 06:51:43 +0000104 o SRP in TLS.
Richard Levitte528f6b82001-06-04 16:23:15 +0000105 [wished by:
106 Dj <derek@yo.net>, Tom Wu <tom@arcot.com>,
107 Tom Holroyd <tomh@po.crl.go.jp>]
108
Richard Levitte27bfba22001-06-04 06:51:43 +0000109 See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt
110 as well as http://www-cs-students.stanford.edu/~tjw/srp/.
Richard Levitte528f6b82001-06-04 16:23:15 +0000111
112 Tom Holroyd tells us there is a SRP patch for OpenSSH at
113 http://members.tripod.com/professor_tom/archives/, that could
114 be useful.