Nabble - OpenSSL - Announce

OpenSSL version 0.9.8e and 0.9.7m released

2007-02-23T05:55:52Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OpenSSL version 0.9.8e and 0.9.7m released
==========================================

OpenSSL - The Open Source toolkit for SSL/TLS
http://www.openssl.org/

The OpenSSL project team is pleased to announce the release of
version 0.9.8e of our open source toolkit for SSL/TLS. This new
OpenSSL version is a feature and bugfix release and incorporates
enhancements and bugfixes to the toolkit. For a complete list of
changes, please see http://www.openssl.org/source/exp/CHANGES.

The 0.9.8e release includes RFC3779 support and several cipher
selection bugfixes.

We also release 0.9.7m, which is the first full release of OpenSSL
which can be linked against the validated FIPS 1.1.1 module.

We consider OpenSSL 0.9.8e to be the best version of OpenSSL
available and we strongly recommend that users of older versions
upgrade as soon as possible. OpenSSL 0.9.8e is available for
download via HTTP and FTP from the following master locations (you
can find the various FTP mirrors under
http://www.openssl.org/source/mirror.html):

* http://www.openssl.org/source/
* ftp://ftp.openssl.org/source/

For those who want or have to stay with the 0.9.7 series of
OpenSSL, we strongly recommend that you upgrade to OpenSSL 0.9.7m
as soon as possible. It's available in the same location as
0.9.8e.

The distribution file names are:

o openssl-0.9.8e.tar.gz
MD5 checksum: 3a7ff24f6ea5cd711984722ad654b927
SHA1 checksum: b429872d2a287714ab37e42296e6a5fbe23d32ff

o openssl-0.9.7m.tar.gz
MD5 checksum: 74a4d1b87e1e6e1ec95dbe58cb4c5b9a
SHA1 checksum: 546f6bcebdf72a633bad087469d3741a42f7b383

The checksums were calculated using the following commands:

openssl md5 openssl-0.9.*.tar.gz
openssl sha1 openssl-0.9.*.tar.gz

Yours,

The OpenSSL Project Team...

Mark J. Cox Nils Larsch Ulf Möller
Ralf S. Engelschall Ben Laurie Andy Polyakov
Dr. Stephen Henson Richard Levitte Geoff Thorpe
Lutz Jänicke Bodo Möller

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBRd7loKLSm3vylcdZAQId2AgAlHAyHW6ItIicPYMJ9QXY51O42sXZlDxz
fIlNHqKBZH3soo1+aRZkiJVSTKGW2f0fBzySW+TqupzFGNQrPOUVdH1QNlLAUB8X
25IgSDXg3rr9uQTHDB2eD7PgXftQJwGki2dFocJO0hKHt7DAQhkMHSsAvjrsP56F
4CXK+Qmkto3iJmIkMG0AQ3Z0IMvT6K/pCdPCuxL3xylouBa9r0D+VN/XDiIBDdTo
/SsB+5NMPX3GuigaUE4Yu9RGak8kSVQK1oSk4xOT2XxqRXV9dOJ2IikBRZ4V/xRZ
bH4y8N8vWLaZ2RXHFg0mkAZp6Hzn8BO9rZleHsHV8tzgoN6XZ1n5KA==
=l4Se
-----END PGP SIGNATURE-----
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Announcement Mailing List openssl-announce@...
Automated List Manager majordomo@...
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@...
Automated List Manager majordomo@...

[ANNOUNCE] OpenSSL version 0.9.7i released

2005-10-14T22:28:08Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OpenSSL version 0.9.7i released
===============================

OpenSSL - The Open Source toolkit for SSL/TLS
http://www.openssl.org/

OpenSSL 0.9.7h caused crashes when the shared libcrypto was
upgraded. This release fixes that problem. For those who want
or have to stay with the 0.9.7 series of OpenSSL instead of using
the 0.9.8 series, we strongly recommend that you upgrade to OpenSSL
0.9.7h soon as possible. For a complete list of changes, please
see http://www.openssl.org/source/exp/CHANGES.

OpenSSL 0.9.7i is available for download via HTTP and FTP from the
following master locations (you can find the various FTP mirrors
under http://www.openssl.org/source/mirror.html):

* http://www.openssl.org/source/
* ftp://ftp.openssl.org/source/

The distribution file names are:

* openssl-0.9.7i.tar.gz
MD5 checksum: f69d82b206ff8bff9d0e721f97380b9e
SHA1 checksum: 4c23925744d43272fa19615454da44e01465eb06

The checksums were calculated using the following commands:

openssl md5 openssl-0.9.*.tar.gz
openssl sha1 openssl-0.9.*.tar.gz

Yours,

The OpenSSL Project Team...

Mark J. Cox Nils Larsch Ulf Möller
Ralf S. Engelschall Ben Laurie Andy Polyakov
Dr. Stephen Henson Richard Levitte Geoff Thorpe
Lutz Jänicke Bodo Möller

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDUIPNp6+eePcJRTsRAjdtAKCINFymy9DS/vrzmxDxLKRNCzIwjwCdGV74
NqcnOE9Eo+TC4RZPcX8dqUU=
=R3AN
-----END PGP SIGNATURE-----
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@...
Automated List Manager majordomo@...

[ANNOUNCE] OpenSSL version 0.9.8a and 0.9.7h released

2005-10-11T05:20:20Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OpenSSL version 0.9.8a and 0.9.7h released
==========================================

OpenSSL - The Open Source toolkit for SSL/TLS
http://www.openssl.org/

The OpenSSL project team is pleased to announce the release of
version 0.9.8a of our open source toolkit for SSL/TLS. This new
OpenSSL version is a security and bugfix release and incorporates
changes and bugfixes to the toolkit. For a complete list of
changes, please see http://www.openssl.org/source/exp/CHANGES.

We also release 0.9.7h, which contains the same security bugfix as
0.9.8a and a few small bugfixes compared to 0.9.7g.

These updates contain a fix for CAN-2005-2969, a potential SSL 2.0
rollback reported by Yutaka Oiwa. For more details of the security
issue being fixed in this release please see
http://www.openssl.org/news/secadv_20051011.txt

We consider OpenSSL 0.9.8a to be the best version of OpenSSL
available and we strongly recommend that users of older versions
upgrade as soon as possible. OpenSSL 0.9.8a is available for
download via HTTP and FTP from the following master locations (you
can find the various FTP mirrors under
http://www.openssl.org/source/mirror.html):

* http://www.openssl.org/source/
* ftp://ftp.openssl.org/source/

For those who want or have to stay with the 0.9.7 series of
OpenSSL, we strongly recommend that you upgrade to OpenSSL 0.9.7h
as soon as possible. It's available in the same location as
0.9.8a.

The distribution file names are:

* openssl-0.9.8a.tar.gz
MD5 checksum: 1d16c727c10185e4d694f87f5e424ee1
SHA1 checksum: 2aaba0f728179370fb3e86b43209205bc6c06a3a

* openssl-0.9.7h.tar.gz
MD5 checksum: 8dc90a113eb8925795071fbe52b2932c
SHA1 checksum: 9fe535fce89af967b29c4727dedd25f2b4cc2f0d

The checksums were calculated using the following commands:

openssl md5 openssl-0.9.*.tar.gz
openssl sha1 openssl-0.9.*.tar.gz

Yours,

The OpenSSL Project Team...

Mark J. Cox Nils Larsch Ulf Möller
Ralf S. Engelschall Ben Laurie Andy Polyakov
Dr. Stephen Henson Richard Levitte Geoff Thorpe
Lutz Jänicke Bodo Möller

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iQCVAwUBQ0uaXu6tTP1JpWPZAQKXyAP/V6xGTooFL52d9Ep0qd0DDaZCSHlukk48
DWljg3EY9QF9BfzLVB1BDbLNuHAyYpeAEjvte4kwHV1vWvAoiabV+XMx8kuoRTxi
O+8NLOeOc1hilC0hLDYfM+XPq5k9dPiOfQvYpnqiwnr/TnwSBh11D+EEcoZlQToE
a6qRMTC3mAM=
=bwJD
-----END PGP SIGNATURE-----

______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@...
Automated List Manager majordomo@...

[ANNOUNCE] OpenSSL 0.9.8 released

2005-07-05T13:40:47Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OpenSSL version 0.9.8 released
==========================================

OpenSSL - The Open Source toolkit for SSL/TLS
http://www.openssl.org/

The OpenSSL project team is pleased to announce the release of
version 0.9.8 of our open source toolkit for SSL/TLS. This new
OpenSSL version is a major release and incorporates many new
features as well as major fixes compared to 0.9.7x. For a complete
list of changes, please see http://www.openssl.org/source/exp/CHANGES .

The most significant changes are:

o Major work on the BIGNUM library for higher efficiency and to
make operations more streamlined and less contradictory. This
is the result of a major audit of the BIGNUM library.
o Addition of BIGNUM functions for fields GF(2^m) and NIST
curves, to support the Elliptic Crypto functions.
o Major work on Elliptic Crypto; ECDH and ECDSA added, including
the use through EVP, X509 and ENGINE.
o New ASN.1 mini-compiler that's usable through the OpenSSL
configuration file.
o Added support for ASN.1 indefinite length constructed encoding.
o New PKCS#12 'medium level' API to manipulate PKCS#12 files.
o Complete rework of shared library construction and linking
programs with shared or static libraries, through a separate
Makefile.shared.
o Rework of the passing of parameters from one Makefile to another.
o Changed ENGINE framework to load dynamic engine modules
automatically from specifically given directories.
o New structure and ASN.1 functions for CertificatePair.
o Changed the ZLIB compression method to be stateful.
o Changed the key-generation and primality testing "progress"
mechanism to take a structure that contains the ticker
function and an argument.
o New engine module: GMP (performs private key exponentiation).
o New engine module: VIA PadLOck ACE extension in VIA C3
Nehemiah processors.
o Added support for IPv6 addresses in certificate extensions.
See RFC 1884, section 2.2.
o Added support for certificate policy mappings, policy
constraints and name constraints.
o Added support for multi-valued AVAs in the OpenSSL
configuration file.
o Added support for multiple certificates with the same subject
in the 'openssl ca' index file.
o Make it possible to create self-signed certificates using
'openssl ca -selfsign'.
o Make it possible to generate a serial number file with
'openssl ca -create_serial'.
o New binary search functions with extended functionality.
o New BUF functions.
o New STORE structure and library to provide an interface to all
sorts of data repositories. Supports storage of public and
private keys, certificates, CRLs, numbers and arbitrary blobs.
This library is unfortunately unfinished and unused withing
OpenSSL.
o New control functions for the error stack.
o Changed the PKCS#7 library to support one-pass S/MIME
processing.
o Added the possibility to compile without old deprecated
functionality with the OPENSSL_NO_DEPRECATED macro or the
'no-deprecated' argument to the config and Configure scripts.
o Constification of all ASN.1 conversion functions, and other
affected functions.
o Improved platform support for PowerPC.
o New FIPS 180-2 algorithms (SHA-224, -256, -384 and -512).
o New X509_VERIFY_PARAM structure to support parametrisation
of X.509 path validation.
o Major overhaul of RC4 performance on Intel P4, IA-64 and
AMD64.
o Changed the Configure script to have some algorithms disabled
by default. Those can be explicitely enabled with the new
argument form 'enable-xxx'.
o Change the default digest in 'openssl' commands from MD5 to
SHA-1.
o Added support for DTLS.
o New BIGNUM blinding.
o Added support for the RSA-PSS encryption scheme
o Added support for the RSA X.931 padding.
o Added support for BSD sockets on NetWare.
o Added support for files larger than 2GB.
o Added initial support for Win64.
o Added alternate pkg-config files.

We consider OpenSSL 0.9.8 to be the best version of OpenSSL available
and we strongly recommend that users of older versions upgrade as
soon as possible. OpenSSL 0.9.8 is available for download via HTTP
and FTP from the following master locations (you can find the various
FTP mirrors under http://www.openssl.org/source/mirror.html):

o http://www.openssl.org/source/
o ftp://ftp.openssl.org/source/

The distribution file name is:

o openssl-0.9.8.tar.gz
MD5 checksum: 9da21071596a124acde6080552deac16
SHA1 checksum: 7350b0f0d1a6d257cb24b9d4dc5e30b80e49d6ac

The checksums were calculated using the following command:

openssl md5 < openssl-0.9.8.tar.gz
openssl sha1 < openssl-0.9.8.tar.gz

Yours,
The OpenSSL Project Team...

Mark J. Cox Nils Larsch Ulf Möller
Ralf S. Engelschall Ben Laurie Andy Polyakov
Dr. Stephen Henson Richard Levitte Geoff Thorpe
Lutz Jänicke Bodo Möller
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCyuIRp6+eePcJRTsRAmPlAJ9E/E0j4ckuIOVb+7xKFeQT0YjlnQCgtkVW
yc0z6p3sqHBzvitdStyEuJI=
=WBGr
-----END PGP SIGNATURE-----
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@...
Automated List Manager majordomo@...

[ANNOUNCE] OpenSSL 0.9.8 beta 6 released

2005-06-21T00:21:41Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OpenSSL version 0.9.8 Beta 6 (FINAL!)
=====================================

OpenSSL - The Open Source toolkit for SSL/TLS
http://www.openssl.org/

OpenSSL is currently in a release cycle. The sixth beta is now
released. The beta release is available for download via HTTP and
FTP from the following master locations (the various FTP mirrors you
can find under http://www.openssl.org/source/mirror.html):

o http://www.openssl.org/source/
o ftp://ftp.openssl.org/source/

PLEASE TEST THIS RELEASE! This is a final beta. The final release
is due very soon, and we would like your help to make this as good a
release as ever possible. Among others, base64 decoding needs extra
attention (see below).

The file names of the beta are:

o openssl-0.9.8-beta6.tar.gz
MD5 checksum: e6771df5621169ae616adb3475aac71a
SHA1 checksum: d5aad452a4a192780ff1990b5c75513eb8408fe2

The checksums were calculated using the following command:

openssl md5 < openssl-0.9.8-beta6.tar.gz
openssl sha1 < openssl-0.9.8-beta6.tar.gz

Please download and test them as soon as possible. This new OpenSSL
version incorporates 104 documented changes and bugfixes to the
toolkit (for a complete list see http://www.openssl.org/source/exp/CHANGES
and http://www.openssl.org/source/exp/NEWS).

Since the fifth beta, the following has happened:

- Change the DJGPP setup so it's DEVRANDOM is defined in e_os.h
instead of in the build command line.
- Worked around a DJGPP command line bug during installation of
docs.
- Worked out better target selections for BSD ELF.
- Corrected the CPUid code for x86_64.
- Made the base64 decoder a bit more robust.
- We made sure crypto/bn/bn_prime.h is properly built during an
update.
- Enhanced the documentation on id_function in threads.pod.
- Added a fallback to software in the CSwift engine.
- Other bug fixes...

Reports and patches should be sent to openssl-bugs@....
Discussions around the development of OpenSSL should be sent to
openssl-dev@.... Anything else should go to
openssl-users@....

The best way, at least on Unix, to create a report is to do the
following after configuration:

make report

That will do a few basic checks of the compiler and bc, then build
and run the tests. The result will appear on screen and in the file
"testlog". Please read the report before sending it to us. There
may be problems that we can't solve for you, like missing programs.

Yours,
The OpenSSL Project Team...

Mark J. Cox Nils Larsch Ulf Möller
Ralf S. Engelschall Ben Laurie Andy Polyakov
Dr. Stephen Henson Richard Levitte Geoff Thorpe
Lutz Jänicke Bodo Möller
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCt7G3p6+eePcJRTsRAmHnAJ9YcnbPEj2J48vkBHpZCBQ1vKQI/wCglgM5
wKq2R9+XiFHQS5aumgYaEkE=
=1qsL
-----END PGP SIGNATURE-----
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@...
Automated List Manager majordomo@...