diff --git a/ChangeLog b/ChangeLog index ad137b8d66..81b4f7b552 100644 --- a/ChangeLog +++ b/ChangeLog @@ -69,7 +69,6 @@ LibreSSL Portable Release Notes: - Improvements in the openssl(1) speed app's signal handler. - Cleaned up various X509v3_* extension API. - Unified the X.509v3 extension methods. - - Added support for TLS PRF in the EVP KDF API. - Cleaned up cipher handling in SSL_SESSION. - Removed get_cipher from SSL_METHOD. - Rewrote CRYPTO_EX_DATA from scratch. The only intentional change of @@ -78,11 +77,18 @@ LibreSSL Portable Release Notes: - Removed bogus connect() call from netcat. - Uses of atoi() and strtol() in libcrypto were replaced with strtonum(). + - Introduced crypto_arch.h which will contain the architecture + dependent code and defines rather than the public opensslconf.h. + - OPENSSL_cpu_caps() is now architecture independent. + - Reorganized the DES implementation to use fewer files and removed + optimizations for ancient processors and compilers. * New features - Added CRLfile option to the cms command of openssl(1) to specify additional CRLs for use during verification. * Documentation improvements - Removed documentation of no longer existing API. + - Unified the description of the obsolete ENGINE parameter that + needs to remain in many functions and should always be NULL. * Testing and proactive security - Switched the remaining tests to new certs. * Compatibility changes @@ -101,21 +107,22 @@ LibreSSL Portable Release Notes: - Removed the useless pem2.h, a public header that was added since it was too hard to add a single prototype to one file. - Removed conf_api.h and the public API therein. + - Removed ssl2.h, ssl23.h and ui_compat.h. - Numerous conf and attribute functions were removed. Some unused types were removed, others were made opaque. - - Only specified versions can be set on certs, CRLs and CSRs. - Removed the deprecated HMAC_Init() function. - Removed OPENSSL_load_builtin_modules(). - Removed X509_REQ_{get,set}_extension_nids(). - X509_check_trust() and was removed, X509_VAL was made opaque. + - Only specified versions can be set on certs, CRLs and CSRs. - Removed unused PEM_USER and PEM_CTX types from pem.h. - Removed typdefs for COMP_CTX, COMP_METHOD, X509_CRL_METHOD, STORE, STORE_METHOD, and SSL_AEAD_CTX. - i2d_ASN1_OBJECT() now returns -1 on error like most other i2d_*. - SPKAC support was removed from openssl(1). - Added TLS1-PRF support to the EVP interface. - - Removed ssl2.h, ssl23.h, and ui_compat.h. - Support for attributes in EVP_PKEYs was removed. + - The X509at_* API is no longer public. - SSL_CTX_set1_cert_store() and SSL_CIPHER_get_handshake_digest() were added to libssl. - The completely broken UI_UTIL password API was removed.