summaryrefslogtreecommitdiff
path: root/NEWS.md
Commit message (Collapse)AuthorAgeFilesLines
* Prepare for 3.0 beta 1Matt Caswell2021-05-201-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Prepare for release of 3.0 alpha 17openssl-3.0.0-alpha17Matt Caswell2021-05-201-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add migration guide for 3.0Shane Lontis2021-05-201-0/+1
| | | | | | Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14710)
* Add a CHANGES entry for fully pluggable groupsMatt Caswell2021-05-171-0/+1
| | | | | | | | | Fixes #12283 Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/15282)
* HTTP client API: Generalize to arbitrary request and response contentsDr. David von Oheimb2021-05-141-2/+4
| | | | | Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/15053)
* Add convenience functions and macros for asymmetric key generationDr. David von Oheimb2021-05-111-0/+1
| | | | | | | | | Add EVP_PKEY_gen(), EVP_PKEY_Q_gen(), EVP_RSA_gen(), and EVP_EC_gen(). Also export auxiliary function OSSL_EC_curve_nid2name() and improve deprecation info on RSA and EC key generation/management functions. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/14695)
* Prepare for 3.0 alpha 17Matt Caswell2021-05-061-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Prepare for release of 3.0 alpha 16openssl-3.0.0-alpha16Matt Caswell2021-05-061-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Prepare for 3.0 alpha 16Matt Caswell2021-04-221-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Prepare for release of 3.0 alpha 15openssl-3.0.0-alpha15Matt Caswell2021-04-221-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Update KTLS documentationMatt Caswell2021-04-121-0/+1
| | | | | | | | | KTLS support has been changed to be off by default, and configuration is via a single "option" rather two "modes". Documentation is updated accordingly. Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14799)
* Prepare for 3.0 alpha 15Matt Caswell2021-04-081-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Prepare for release of 3.0 alpha 14openssl-3.0.0-alpha14Matt Caswell2021-04-081-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Update CHANGES.md and NEWS.md for new releaseMatt Caswell2021-03-251-0/+5
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Prepare for 3.0 alpha 14Matt Caswell2021-03-111-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Prepare for release of 3.0 alpha 13openssl-3.0.0-alpha13Matt Caswell2021-03-111-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Mention the change of licence in NEWS.mdMatt Caswell2021-03-101-0/+1
| | | | | | Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14465)
* Add a missing CHANGES.md entry for the legacy providerMatt Caswell2021-03-101-0/+4
| | | | | | | | | | | Numerous ciphers and digests have been moved to the legacy provider. There should be a CHANGES.md entry pointing this out. Fixes #14441 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14465)
* Prepare for 3.0 alpha 13Matt Caswell2021-02-181-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Prepare for release of 3.0 alpha 12openssl-3.0.0-alpha12Matt Caswell2021-02-181-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Update CHANGES and NEWS for new releaseMatt Caswell2021-02-161-1/+13
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Prepare for 3.0 alpha 12Richard Levitte2021-01-281-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Prepare for release of 3.0 alpha 11openssl-3.0.0-alpha11Richard Levitte2021-01-281-1/+1
| | | | Reviewed-by: Tomas Mraz <tomas@openssl.org>
* Update NEWS.md before alpha11 releaseRichard Levitte2021-01-281-1/+5
| | | | | | Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13996)
* Prepare for 3.0 alpha 11Matt Caswell2021-01-071-1/+1
| | | | Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
* Prepare for release of 3.0 alpha 10openssl-3.0.0-alpha10Matt Caswell2021-01-071-1/+1
| | | | Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
* dsa: add additional deprecated functions to CHANGES entry.Pauli2020-12-171-0/+1
| | | | | | Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13638)
* Update CHANGES and NEWS for new releaseMatt Caswell2020-12-081-1/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* ERR: Drop or deprecate dangerous or overly confusing functionsRichard Levitte2020-11-281-1/+3
| | | | | | | | | | | | | | | ERR_get_error_line() is deprecated, and ERR_get_error_func() and ERR_get_error_data() are removed in favor of ERR_get_error_all(), since they pop the error record, leaving the caller with only partial error record data and no way to get the rest if the wish. If it's desirable to retrieve data piecemeal, the caller should consider using the diverse ERR_peek functions and finish off with ERR_get_error(). Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/13466)
* Prepare for 3.0 alpha 10Matt Caswell2020-11-261-1/+1
| | | | Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
* Prepare for release of 3.0 alpha 9openssl-3.0.0-alpha9Matt Caswell2020-11-261-1/+1
| | | | Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
* Modify the ERR init functions to use the internal ERR string loadersRichard Levitte2020-11-241-0/+1
| | | | | | | | | | | | | | This deprecates all the ERR_load_ functions, and moves their definition to separate C source files that can easily be removed when those functions are finally removed. This also reduces include/openssl/kdferr.h to include cryptoerr_legacy.h, moves the declaration of ERR_load_ERR_strings() from include/openssl/err.h to include/openssl/cryptoerr_legacy.h, and finally removes the declaration of ERR_load_DSO_strings(), which was entirely internal anyway. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13390)
* Prepare for 3.0 alpha 9Matt Caswell2020-11-051-1/+1
| | | | Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
* Prepare for release of 3.0 alpha 8openssl-3.0.0-alpha8Matt Caswell2020-11-051-1/+1
| | | | Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
* Prepare for 3.0 alpha 8Matt Caswell2020-10-151-1/+1
| | | | Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
* Prepare for release of 3.0 alpha 7openssl-3.0.0-alpha7Matt Caswell2020-10-151-1/+1
| | | | Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
* Rename OPENSSL_CTX prefix to OSSL_LIB_CTXDr. Matthias St. Pierre2020-10-151-1/+1
| | | | | | | | | | | | Many of the new types introduced by OpenSSL 3.0 have an OSSL_ prefix, e.g., OSSL_CALLBACK, OSSL_PARAM, OSSL_ALGORITHM, OSSL_SERIALIZER. The OPENSSL_CTX type stands out a little by using a different prefix. For consistency reasons, this type is renamed to OSSL_LIB_CTX. Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/12621)
* Change CVE link style in CHANGES and NEWSDr. Matthias St. Pierre2020-10-061-245/+245
| | | | | | | | | | | | | | | | | | | Replace [collapsed reference links][] for the CVEs by [shortcut reference links], in order to to improve the readability of the raw markdown text. Consistently add parentheses around the CVE links at the end of the CVE descriptions. (The NEWS file already had the parentheses, in the CHANGES file they where missing.) [collapsed reference links]: https://github.github.com/gfm/#collapsed-reference-link [shortcut reference links]: https://github.github.com/gfm/#shortcut-reference-link Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/12967)
* Update CHANGES and NEWS for 1.1.1h releaseDr. Matthias St. Pierre2020-10-061-1/+18
| | | | | Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/12967)
* Rename OSSL_SERIALIZER / OSSL_DESERIALIZER to OSSL_ENCODE / OSSL_DECODERichard Levitte2020-08-211-1/+1
| | | | | | | Fixes #12455 Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/12660)
* rand_drbg: remove RAND_DRBG.Pauli2020-08-071-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | The RAND_DRBG API did not fit well into the new provider concept as implemented by EVP_RAND and EVP_RAND_CTX. The main reason is that the RAND_DRBG API is a mixture of 'front end' and 'back end' API calls and some of its API calls are rather low-level. This holds in particular for the callback mechanism (RAND_DRBG_set_callbacks()) and the RAND_DRBG type changing mechanism (RAND_DRBG_set()). Adding a compatibility layer to continue supporting the RAND_DRBG API as a legacy API for a regular deprecation period turned out to come at the price of complicating the new provider API unnecessarily. Since the RAND_DRBG API exists only since version 1.1.1, it was decided by the OMC to drop it entirely. Other related changes: Use RNG instead of DRBG in EVP_RAND documentation. The documentation was using DRBG in places where it should have been RNG or CSRNG. Move the RAND_DRBG(7) documentation to EVP_RAND(7). Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> (Merged from https://github.com/openssl/openssl/pull/12509)
* Prepare for 3.0 alpha 7Matt Caswell2020-08-061-1/+1
| | | | Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
* Prepare for release of 3.0 alpha 6openssl-3.0.0-alpha6Matt Caswell2020-08-061-1/+1
| | | | Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
* check-format.pl: Add an entry about it to NEWS.md and to CHANGES.mdDr. David von Oheimb2020-07-201-0/+1
| | | | | Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/12270)
* Prepare for 3.0 alpha 6Richard Levitte2020-07-161-1/+1
| | | | Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
* Prepare for release of 3.0 alpha 5openssl-3.0.0-alpha5Richard Levitte2020-07-161-1/+1
| | | | Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
* Add latest changes and news in CHANGES.md and NEWS.mdRichard Levitte2020-07-161-0/+1
| | | | | | | | | - Reworked test perl framwork for parallel tests - Reworked ERR codes to make better space for system errors - Deprecation of the ENGINE API Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/12461)
* Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txtDr. David von Oheimb2020-07-051-1/+1
| | | | | Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/12109)
* Fix typos and repeated wordsGustaf Neumann2020-07-051-7/+7
| | | | | | | | CLA: trivial Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> (Merged from https://github.com/openssl/openssl/pull/12320)
* Update NEWS and CHANGESRichard Levitte2020-06-281-0/+1
| | | | | | | NEWS and CHANGES hasn't mentioned OPENSSL_CTX before, so adding entries now. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/12228)