Steve Henson Support for policyMappings certificate extension. Print out extension server and client. Such reuse is and has been strongly discouraged believed to rare [...]

W Ralf S. This effectively removes the link between digests and public key types [...]

CVE Viktor Dukhovni Changes between. Steve Henson Disable MD in the default configuration [...]

B. This can be used to increase CRL handling efficiency especially when CRLs are very large by for example storing the revoked certificates database. Steve Henson Corrected the numerous bugs in Win path splitter DSO [...]

If you d like to contribute fork pysheeet GitHub. Fix this by changing the value of SSL OP NO TLSv to xL Any application which was previously compiled against OpenSSL. Zapping your evil casts will probably fix them. kasper Google Newverify name option in command line utilities to set verification parameters by [...]

This allows hardware acceleration and key storage be handled without major modification the library. Peter Eckersley pde eff Ben Laurie and Steve Henson Redirect DSA DH operations to FIPS module in mode. This almost completely replaces the old ASN functionality with table driven encoder and decoder which interprets ITEM structure describing module. See the ASYNC start job man page for further details [...]

In PCBC mode each block of plaintext is XORed with both the previous and ciphertext before being encrypted. for a full DH exchange. Oliver Tappe zooey hirschkaefer New make target install html docs installs renditions of the manual pages. Certificates and keys can be added using this API to created arbitrary PKCS files while avoiding the low level . Steve Henson crlf option to client and server for sending newlines as required by many protocols [...]

Steve Henson Extend mkmf to support importing of options and assembly language files from Configure script currently only included VCWIN. The new option is and can be applied to req x. ox linuxsparc configuration. Emilia K sper The return type of BIO number read and written as well corresponding write members structure has changed from unsigned long to uint . This feature only applies bit x architecture platforms that support AES NI instructions [...]

The old names are available with API compatibility. Interop testing has been performed using CryptoPro Victor [...]

Also an error is recorded on the thread queue. They can be reenabled using enableweak sslciphers option to Configure [...]

Bodo Moeller Disable rogue ciphersuites SSLv x RC MD TLSv EXPRC CBCMD The latter two were purportedly from draftietf bitciphersuites . Bodo Moeller Modify EVP Digest routines so they now return values. This patch adds the pqueue size function to determine of buffer and limits record entries. Delete the PEM cb function and make it default behaviour [...]

This hack will never appear in. e which caused repeated calls to OpenSSL add ciphers and digests be ignored even after calling EVP cleanup . Its main drawbacks are that encryption is sequential [...]