| 
									
										
										
										
											1998-12-30 17:08:05 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  |   OpenSSL STATUS                           Last modified at | 
					
						
							| 
									
										
										
										
											2011-02-09 01:48:57 +08:00
										 |  |  |   ______________                           $Date: 2011/02/08 17:48:56 $ | 
					
						
							| 
									
										
										
										
											1998-12-30 17:08:05 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  |   DEVELOPMENT STATE | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2010-11-16 22:18:51 +08:00
										 |  |  |     o  OpenSSL 1.1.0:  Under development... | 
					
						
							| 
									
										
										
										
											2011-02-09 01:48:57 +08:00
										 |  |  |     o  OpenSSL 1.0.1:  Under development... | 
					
						
							|  |  |  |     o  OpenSSL 1.0.0d: Released on February   8nd, 2011 | 
					
						
							|  |  |  |     o  OpenSSL 1.0.0c: Released on December   2nd, 2010 | 
					
						
							| 
									
										
										
										
											2010-11-16 22:18:51 +08:00
										 |  |  |     o  OpenSSL 1.0.0b: Released on November  16th, 2010 | 
					
						
							|  |  |  |     o  OpenSSL 1.0.0a: Released on June      1st,  2010 | 
					
						
							|  |  |  |     o  OpenSSL 1.0.0:  Released on March     29th, 2010 | 
					
						
							| 
									
										
										
										
											2011-02-09 01:48:57 +08:00
										 |  |  |     o  OpenSSL 0.9.8r: Released on February   8nd, 2011 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8q: Released on December   2nd, 2010 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8p: Released on November  16th, 2010 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8o: Released on June       1st, 2010 | 
					
						
							| 
									
										
										
										
											2010-11-16 22:18:51 +08:00
										 |  |  |     o  OpenSSL 0.9.8n: Released on March     24th, 2010 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8m: Released on February  25th, 2010 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8l: Released on November   5th, 2009 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8k: Released on March     25th, 2009 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8j: Released on January    7th, 2009 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8i: Released on September 15th, 2008 | 
					
						
							| 
									
										
										
										
											2008-05-29 06:30:28 +08:00
										 |  |  |     o  OpenSSL 0.9.8h: Released on May       28th, 2008 | 
					
						
							| 
									
										
										
										
											2007-10-19 16:26:03 +08:00
										 |  |  |     o  OpenSSL 0.9.8g: Released on October   19th, 2007 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8f: Released on October   11th, 2007 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8e: Released on February  23rd, 2007 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8d: Released on September 28th, 2006 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8c: Released on September  5th, 2006 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.8b: Released on May        4th, 2006 | 
					
						
							| 
									
										
										
										
											2005-10-27 03:40:45 +08:00
										 |  |  |     o  OpenSSL 0.9.8a: Released on October   11th, 2005 | 
					
						
							| 
									
										
										
										
											2005-07-06 03:16:24 +08:00
										 |  |  |     o  OpenSSL 0.9.8:  Released on July       5th, 2005 | 
					
						
							| 
									
										
										
										
											2008-05-29 06:30:28 +08:00
										 |  |  |     o  OpenSSL 0.9.7m: Released on February  23rd, 2007 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7l: Released on September 28th, 2006 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7k: Released on September  5th, 2006 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7j: Released on May        4th, 2006 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7i: Released on October   14th, 2005 | 
					
						
							| 
									
										
										
										
											2005-10-27 03:40:45 +08:00
										 |  |  |     o  OpenSSL 0.9.7h: Released on October   11th, 2005 | 
					
						
							| 
									
										
										
										
											2005-04-26 05:42:14 +08:00
										 |  |  |     o  OpenSSL 0.9.7g: Released on April     11th, 2005 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7f: Released on March     22nd, 2005 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7e: Released on October   25th, 2004 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7d: Released on March     17th, 2004 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7c: Released on September 30th, 2003 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.7b: Released on April     10th, 2003 | 
					
						
							| 
									
										
										
										
											2003-02-19 22:02:37 +08:00
										 |  |  |     o  OpenSSL 0.9.7a: Released on February  19th, 2003 | 
					
						
							| 
									
										
										
										
											2002-12-31 07:56:09 +08:00
										 |  |  |     o  OpenSSL 0.9.7:  Released on December  31st, 2002 | 
					
						
							| 
									
										
										
										
											2005-04-26 05:42:14 +08:00
										 |  |  |     o  OpenSSL 0.9.6m: Released on March     17th, 2004 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.6l: Released on November   4th, 2003 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.6k: Released on September 30th, 2003 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.6j: Released on April     10th, 2003 | 
					
						
							| 
									
										
										
										
											2003-02-19 22:02:37 +08:00
										 |  |  |     o  OpenSSL 0.9.6i: Released on February  19th, 2003 | 
					
						
							| 
									
										
										
										
											2002-12-06 05:50:13 +08:00
										 |  |  |     o  OpenSSL 0.9.6h: Released on December   5th, 2002 | 
					
						
							| 
									
										
										
										
											2002-08-12 14:54:54 +08:00
										 |  |  |     o  OpenSSL 0.9.6g: Released on August     9th, 2002 | 
					
						
							| 
									
										
										
										
											2002-08-09 06:55:28 +08:00
										 |  |  |     o  OpenSSL 0.9.6f: Released on August     8th, 2002 | 
					
						
							| 
									
										
										
										
											2002-07-30 19:32:47 +08:00
										 |  |  |     o  OpenSSL 0.9.6e: Released on July      30th, 2002 | 
					
						
							| 
									
										
										
										
											2002-05-10 07:54:02 +08:00
										 |  |  |     o  OpenSSL 0.9.6d: Released on May        9th, 2002 | 
					
						
							| 
									
										
										
										
											2001-12-21 11:23:15 +08:00
										 |  |  |     o  OpenSSL 0.9.6c: Released on December  21st, 2001 | 
					
						
							| 
									
										
										
										
											2001-07-17 22:39:26 +08:00
										 |  |  |     o  OpenSSL 0.9.6b: Released on July       9th, 2001 | 
					
						
							| 
									
										
										
										
											2001-04-09 15:15:16 +08:00
										 |  |  |     o  OpenSSL 0.9.6a: Released on April      5th, 2001 | 
					
						
							| 
									
										
										
										
											2000-09-24 23:42:34 +08:00
										 |  |  |     o  OpenSSL 0.9.6:  Released on September 24th, 2000 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.5a: Released on April      1st, 2000 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.5:  Released on February  28th, 2000 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.4:  Released on August    09th, 1999 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.3a: Released on May       29th, 1999 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.3:  Released on May       25th, 1999 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.2b: Released on March     22th, 1999 | 
					
						
							|  |  |  |     o  OpenSSL 0.9.1c: Released on December  23th, 1998 | 
					
						
							| 
									
										
										
										
											1998-12-30 17:08:05 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2008-04-07 14:37:05 +08:00
										 |  |  |   [See also http://www.openssl.org/support/rt.html] | 
					
						
							| 
									
										
										
										
											2002-02-20 20:31:23 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2002-05-16 17:28:09 +08:00
										 |  |  |   RELEASE SHOWSTOPPERS | 
					
						
							| 
									
										
										
										
											2002-02-20 20:31:23 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2005-06-28 13:55:22 +08:00
										 |  |  |     o The Makefiles fail with some SysV makes. | 
					
						
							| 
									
										
										
										
											2003-02-28 23:17:45 +08:00
										 |  |  |     o  | 
					
						
							| 
									
										
										
										
											2002-11-22 06:39:08 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											1998-12-30 17:08:05 +08:00
										 |  |  |   AVAILABLE PATCHES | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2001-11-15 05:21:47 +08:00
										 |  |  |     o  | 
					
						
							| 
									
										
										
										
											2001-07-17 22:39:26 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											1998-12-30 17:08:05 +08:00
										 |  |  |   IN PROGRESS | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											1999-03-29 08:19:55 +08:00
										 |  |  |     o Steve is currently working on (in no particular order): | 
					
						
							| 
									
										
										
										
											2000-07-03 05:11:11 +08:00
										 |  |  |         ASN1 code redesign, butchery, replacement. | 
					
						
							| 
									
										
										
										
											2000-12-14 02:21:51 +08:00
										 |  |  |         OCSP | 
					
						
							| 
									
										
										
										
											2000-05-27 07:51:35 +08:00
										 |  |  |         EVP cipher enhancement. | 
					
						
							| 
									
										
										
										
											2000-12-14 02:21:51 +08:00
										 |  |  |         Enhanced certificate chain verification. | 
					
						
							| 
									
										
										
										
											1999-04-17 07:57:04 +08:00
										 |  |  | 	Private key, certificate and CRL API and implementation. | 
					
						
							| 
									
										
										
										
											1999-12-05 08:40:59 +08:00
										 |  |  | 	Developing and bugfixing PKCS#7 (S/MIME code). | 
					
						
							| 
									
										
										
										
											1999-08-10 06:38:05 +08:00
										 |  |  |         Various X509 issues: character sets, certificate request extensions. | 
					
						
							| 
									
										
										
										
											2000-06-15 01:27:02 +08:00
										 |  |  |     o Richard is currently working on: | 
					
						
							| 
									
										
										
										
											2000-11-19 22:11:03 +08:00
										 |  |  | 	Constification | 
					
						
							| 
									
										
										
										
											2002-12-08 04:02:20 +08:00
										 |  |  | 	Attribute Certificate support | 
					
						
							|  |  |  | 	Certificate Pair support | 
					
						
							|  |  |  | 	Storage Engines (primarly an LDAP storage engine) | 
					
						
							| 
									
										
										
										
											2002-12-13 03:40:55 +08:00
										 |  |  | 	Certificate chain validation with full RFC 3280 compatibility | 
					
						
							| 
									
										
										
										
											1999-01-31 01:35:01 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											1998-12-30 17:08:05 +08:00
										 |  |  |   NEEDS PATCH | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2002-08-14 19:07:29 +08:00
										 |  |  |     o  0.9.8-dev: COMPLEMENTOFALL and COMPLEMENTOFDEFAULT do not | 
					
						
							|  |  |  |        handle ECCdraft cipher suites correctly. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2001-01-11 00:25:12 +08:00
										 |  |  |     o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file | 
					
						
							| 
									
										
										
										
											1999-04-09 04:45:53 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2001-09-11 20:20:20 +08:00
										 |  |  |     o  "OpenSSL STATUS" is never up-to-date. | 
					
						
							| 
									
										
										
										
											2001-01-11 21:33:10 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2001-09-11 20:20:20 +08:00
										 |  |  |   OPEN ISSUES | 
					
						
							| 
									
										
										
										
											2001-01-11 00:37:35 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											1999-01-03 00:28:51 +08:00
										 |  |  |     o  The Makefile hierarchy and build mechanism is still not a round thing: | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |        1. The config vs. Configure scripts | 
					
						
							|  |  |  |           It's the same nasty situation as for Apache with APACI vs. | 
					
						
							|  |  |  |           src/Configure. It confuses. | 
					
						
							|  |  |  |           Suggestion: Merge Configure and config into a single configure | 
					
						
							|  |  |  |                       script with a Autoconf style interface ;-) and remove | 
					
						
							|  |  |  |                       Configure and config. Or even let us use GNU Autoconf | 
					
						
							|  |  |  |                       itself. Then we can avoid a lot of those platform checks | 
					
						
							|  |  |  |                       which are currently in Configure. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											1998-12-31 20:14:27 +08:00
										 |  |  |     o  Support for Shared Libraries has to be added at least | 
					
						
							|  |  |  |        for the major Unix platforms. The details we can rip from the stuff | 
					
						
							|  |  |  |        Ralf has done for the Apache src/Configure script. Ben wants the | 
					
						
							|  |  |  |        solution to be really simple. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |        Status: Ralf will look how we can easily incorporate the | 
					
						
							|  |  |  |                compiler PIC and linker DSO flags from Apache | 
					
						
							|  |  |  |                into the OpenSSL Configure script. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											1999-09-22 01:19:05 +08:00
										 |  |  |                Ulf: +1 for using GNU autoconf and libtool (but not automake, | 
					
						
							|  |  |  |                     which apparently is not flexible enough to generate | 
					
						
							|  |  |  |                     libcrypto) | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											1999-01-21 21:01:20 +08:00
										 |  |  |   WISHES | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2002-02-09 09:49:53 +08:00
										 |  |  |     o  Add variants of DH_generate_parameters() and BN_generate_prime() [etc?] | 
					
						
							|  |  |  |        where the callback function can request that the function be aborted. | 
					
						
							|  |  |  |        [Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>] | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2001-06-04 14:51:43 +08:00
										 |  |  |     o  SRP in TLS. | 
					
						
							| 
									
										
										
										
											2001-06-05 00:23:15 +08:00
										 |  |  |        [wished by: | 
					
						
							|  |  |  |         Dj <derek@yo.net>, Tom Wu <tom@arcot.com>, | 
					
						
							|  |  |  |         Tom Holroyd <tomh@po.crl.go.jp>] | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2001-06-04 14:51:43 +08:00
										 |  |  |        See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt | 
					
						
							|  |  |  |        as well as http://www-cs-students.stanford.edu/~tjw/srp/. | 
					
						
							| 
									
										
										
										
											2001-06-05 00:23:15 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  |        Tom Holroyd tells us there is a SRP patch for OpenSSH at | 
					
						
							|  |  |  |        http://members.tripod.com/professor_tom/archives/, that could | 
					
						
							|  |  |  |        be useful. |