Releases such that the only way registered ENGINE could be used assuming it initialises successfully host was to explicitly set default for relevant algorithms. Bodo Moeller Add support for dsawith SHA and . Update DRBG algorithm test and POST to handle HMAC cases [...]

Victor Duchovni Fix the BIT STRING encoding generated by crypto ec asn. Further analysis was conducted and fixes were developed by Stephen Henson of OpenSSL core team [...]

Bodo Moeller Fix ssl get message both. If the CRL checking flag s are set then is looked up X STORE structure and its validity signature checked certificate found verify fails with revoked error. NB this will result in signature failure errors for some broken certificates [...]

An individual ASN method can now print out signatures instead of the standard hex dump. Thanks to Karthikeyan Bhargavan of the PROSECCO team at INRIA for reporting this issue. CVE Matt Caswell Segmentation fault in ASN TYPE cmp fix The function will crash with an invalid read if attempt is made to compare [...]

This will reject various cases including garbage after signature thanks to Antti Karjalainen and Tuomo Untinen from the Codenomicon CROSS program for discovering use of BER invalid ASN. Previously a TLS client would ignore missing message. f Aug Changes between. Oddly enough there wasn function to compare two certificates [...]

Andy Polyakov Implement Opaque PRF Input TLS extension as specified draftrescorla tlsopaque prfinput . ctrl functions now have corresponding [...]

D Feb Make the decoding of SSLv TLS and DTLS CBC records constant time. Roman E. Bodo Moeller Include RAND status into METHOD instead of implementing it only for md . c increase DEFAULT BUFFER SIZE to previously it was [...]

By sending an invalid DTLS handshake to OpenSSL client the code can be made recurse eventually crashing DoS attack. g Mar Changes between [...]

Compatible password based encryption algorithms and PKCS functionality. Also some ippda OIDs in crypto objects . Bodo Moeller Add the symmetric cipher Camellia bit key versions which is now available for royaltyfree use see http crypt eng info chiteki ml [...]

Young Added more recognized ASN. Before this you could only use some ECC ciphersuites with SHA . series ONLY. This issue was discovered by Sean Burford Google and Emilia K sper OpenSSL development team [...]

H the latter is normally done by Configure something similar. Bodo Moeller The second argument to set label in perlasm was already being used so couldn file scope flag. gai db fd INET www gle m fb . noui is still possible to use as an alias [...]

Various cleanups and fixes. DN email DNS and URI types are currently supported. Richard Levitte Remove the VMSspecific of gmtime from crypto times. To enable one of these sections preprocessor symbol OPENSSL [...]