diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-04-22 13:12:45 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2020-04-23 14:15:16 +0200 |
| commit | e7774c287c9a4cd9bab461eb878d269f94c52cd5 (patch) | |
| tree | f4e81bbc81244ef9ceeec7b144801a62a2019201 | |
| parent | Fix a typo in the makefile templates (diff) | |
| download | openssl-e7774c287c9a4cd9bab461eb878d269f94c52cd5.tar.xz openssl-e7774c287c9a4cd9bab461eb878d269f94c52cd5.zip | |
Add info on the CMP implementation and HTTP client to NEWS.md and CHANGES.md
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/11608)
| -rw-r--r-- | CHANGES.md | 12 | ||||
| -rw-r--r-- | NEWS.md | 6 |
2 files changed, 18 insertions, 0 deletions
diff --git a/CHANGES.md b/CHANGES.md index 21ce8962a5..78e8f88c62 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -87,6 +87,18 @@ OpenSSL 3.0 *Richard Levitte* + * Added an implementation of CMP and CRMF (RFC 4210, RFC 4211 RFC 6712). + This adds crypto/cmp/, crpyto/crmf/, and test/cmp_*. + See L<OSSL_CMP_exec_IR_ses(3)> as starting point. + + *David von Oheimb* + + * Generalized the HTTP client code from crypto/ocsp/ into crpyto/http/. + The legacy OCSP-focused and only partly documented API is retained. + See L<OSSL_CMP_MSG_http_perform(3)> etc. for details. + + *David von Oheimb* + * All of the low level RSA functions have been deprecated including: RSA_new_method, RSA_bits, RSA_size, RSA_security_bits, @@ -33,6 +33,12 @@ OpenSSL 3.0 authenticate servers or clients. * enable-crypto-mdebug and enable-crypto-mdebug-backtrace were mostly disabled; the project uses address sanitize/leak-detect instead. + * Added a Certificate Management Protocol (CMP, RFC 4210) implementation + also covering CRMF (RFC 4211) and HTTP transfer (RFC 6712). + It is part of the crypto lib, while a 'cmp' app using it is in preparation. + All widely used CMP features are supported for both clients and servers. + * Added a proper HTTP(S) client to libcrypto supporting GET and POST, + redirection, plain and ASN.1-encoded contents, proxies, and timeouts. * Added OSSL_SERIALIZER, a generic serializer API. * Added OSSL_PARAM_BLD, an easier to use API to OSSL_PARAM. * Added error raising macros, ERR_raise() and ERR_raise_data(). |