Restoring authorship annotation for <orivej@yandex-team.ru>. Commit 2 of 2.

1 files changed, 953 insertions, 953 deletions

diff --git a/contrib/libs/openssl/NEWS b/contrib/libs/openssl/NEWS
index 31bbbe19d0..5a1207c66e 100644
--- a/contrib/libs/openssl/NEWS
+++ b/contrib/libs/openssl/NEWS
@@ -1,10 +1,10 @@
- 
-  NEWS 
-  ==== 
- 
-  This file gives a brief overview of the major changes between each OpenSSL 
-  release. For more details please read the CHANGES file. 
- 
+
+  NEWS
+  ====
+
+  This file gives a brief overview of the major changes between each OpenSSL
+  release. For more details please read the CHANGES file.
+
   Major changes between OpenSSL 1.1.1k and OpenSSL 1.1.1l [24 Aug 2021]
 
       o Fixed an SM2 Decryption Buffer Overflow (CVE-2021-3711)
@@ -55,949 +55,949 @@
       o Properly detect unexpected EOF while reading in libssl and report
         it via SSL_ERROR_SSL
 
-  Major changes between OpenSSL 1.1.1c and OpenSSL 1.1.1d [10 Sep 2019] 
- 
-      o Fixed a fork protection issue (CVE-2019-1549) 
-      o Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey 
-        (CVE-2019-1563) 
-      o For built-in EC curves, ensure an EC_GROUP built from the curve name is 
-        used even when parsing explicit parameters 
-      o Compute ECC cofactors if not provided during EC_GROUP construction 
-        (CVE-2019-1547) 
-      o Early start up entropy quality from the DEVRANDOM seed source has been 
-        improved for older Linux systems 
-      o Correct the extended master secret constant on EBCDIC systems 
-      o Use Windows installation paths in the mingw builds (CVE-2019-1552) 
-      o Changed DH_check to accept parameters with order q and 2q subgroups 
-      o Significantly reduce secure memory usage by the randomness pools 
-      o Revert the DEVRANDOM_WAIT feature for Linux systems 
- 
-  Major changes between OpenSSL 1.1.1b and OpenSSL 1.1.1c [28 May 2019] 
- 
-      o Prevent over long nonces in ChaCha20-Poly1305 (CVE-2019-1543) 
- 
-  Major changes between OpenSSL 1.1.1a and OpenSSL 1.1.1b [26 Feb 2019] 
- 
-      o Change the info callback signals for the start and end of a post-handshake 
-        message exchange in TLSv1.3. 
-      o Fix a bug in DTLS over SCTP. This breaks interoperability with older versions 
-        of OpenSSL like OpenSSL 1.1.0 and OpenSSL 1.0.2. 
- 
-  Major changes between OpenSSL 1.1.1 and OpenSSL 1.1.1a [20 Nov 2018] 
- 
-      o Timing vulnerability in DSA signature generation (CVE-2018-0734) 
-      o Timing vulnerability in ECDSA signature generation (CVE-2018-0735) 
- 
-  Major changes between OpenSSL 1.1.0i and OpenSSL 1.1.1 [11 Sep 2018] 
- 
-      o Support for TLSv1.3 added (see https://wiki.openssl.org/index.php/TLS1.3 
-        for further important information). The TLSv1.3 implementation includes: 
-          o Fully compliant implementation of RFC8446 (TLSv1.3) on by default 
-          o Early data (0-RTT) 
-          o Post-handshake authentication and key update 
-          o Middlebox Compatibility Mode 
-          o TLSv1.3 PSKs 
-          o Support for all five RFC8446 ciphersuites 
-          o RSA-PSS signature algorithms (backported to TLSv1.2) 
-          o Configurable session ticket support 
-          o Stateless server support 
-          o Rewrite of the packet construction code for "safer" packet handling 
-          o Rewrite of the extension handling code 
-      o Complete rewrite of the OpenSSL random number generator to introduce the 
-        following capabilities 
-          o The default RAND method now utilizes an AES-CTR DRBG according to 
-            NIST standard SP 800-90Ar1. 
-          o Support for multiple DRBG instances with seed chaining. 
-          o There is a public and private DRBG instance. 
-          o The DRBG instances are fork-safe. 
-          o Keep all global DRBG instances on the secure heap if it is enabled. 
-          o The public and private DRBG instance are per thread for lock free 
-            operation 
-      o Support for various new cryptographic algorithms including: 
-          o SHA3 
-          o SHA512/224 and SHA512/256 
-          o EdDSA (both Ed25519 and Ed448) including X509 and TLS support 
-          o X448 (adding to the existing X25519 support in 1.1.0) 
-          o Multi-prime RSA 
-          o SM2 
-          o SM3 
-          o SM4 
-          o SipHash 
-          o ARIA (including TLS support) 
-      o Significant Side-Channel attack security improvements 
-      o Add a new ClientHello callback to provide the ability to adjust the SSL 
-        object at an early stage. 
-      o Add 'Maximum Fragment Length' TLS extension negotiation and support 
-      o A new STORE module, which implements a uniform and URI based reader of 
-        stores that can contain keys, certificates, CRLs and numerous other 
-        objects. 
-      o Move the display of configuration data to configdata.pm. 
-      o Allow GNU style "make variables" to be used with Configure. 
-      o Claim the namespaces OSSL and OPENSSL, represented as symbol prefixes 
-      o Rewrite of devcrypto engine 
- 
-  Major changes between OpenSSL 1.1.0h and OpenSSL 1.1.0i [under development] 
- 
-      o Client DoS due to large DH parameter (CVE-2018-0732) 
-      o Cache timing vulnerability in RSA Key Generation (CVE-2018-0737) 
- 
-  Major changes between OpenSSL 1.1.0g and OpenSSL 1.1.0h [under development] 
- 
-      o Constructed ASN.1 types with a recursive definition could exceed the 
-        stack (CVE-2018-0739) 
-      o Incorrect CRYPTO_memcmp on HP-UX PA-RISC (CVE-2018-0733) 
-      o rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738) 
- 
-  Major changes between OpenSSL 1.1.0f and OpenSSL 1.1.0g [2 Nov 2017] 
- 
-      o bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736) 
-      o Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735) 
- 
-  Major changes between OpenSSL 1.1.0e and OpenSSL 1.1.0f [25 May 2017] 
- 
-      o config now recognises 64-bit mingw and chooses mingw64 instead of mingw 
- 
-  Major changes between OpenSSL 1.1.0d and OpenSSL 1.1.0e [16 Feb 2017] 
- 
-      o Encrypt-Then-Mac renegotiation crash (CVE-2017-3733) 
- 
-  Major changes between OpenSSL 1.1.0c and OpenSSL 1.1.0d [26 Jan 2017] 
- 
-      o Truncated packet could crash via OOB read (CVE-2017-3731) 
-      o Bad (EC)DHE parameters cause a client crash (CVE-2017-3730) 
-      o BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732) 
- 
-  Major changes between OpenSSL 1.1.0b and OpenSSL 1.1.0c [10 Nov 2016] 
- 
-      o ChaCha20/Poly1305 heap-buffer-overflow (CVE-2016-7054) 
-      o CMS Null dereference (CVE-2016-7053) 
-      o Montgomery multiplication may produce incorrect results (CVE-2016-7055) 
- 
-  Major changes between OpenSSL 1.1.0a and OpenSSL 1.1.0b [26 Sep 2016] 
- 
-      o Fix Use After Free for large message sizes (CVE-2016-6309) 
- 
-  Major changes between OpenSSL 1.1.0 and OpenSSL 1.1.0a [22 Sep 2016] 
- 
-      o OCSP Status Request extension unbounded memory growth (CVE-2016-6304) 
-      o SSL_peek() hang on empty record (CVE-2016-6305) 
-      o Excessive allocation of memory in tls_get_message_header() 
-       (CVE-2016-6307) 
-      o Excessive allocation of memory in dtls1_preprocess_fragment() 
-       (CVE-2016-6308) 
- 
-  Major changes between OpenSSL 1.0.2h and OpenSSL 1.1.0 [25 Aug 2016] 
- 
-      o Copyright text was shrunk to a boilerplate that points to the license 
-      o "shared" builds are now the default when possible 
-      o Added support for "pipelining" 
-      o Added the AFALG engine 
-      o New threading API implemented 
-      o Support for ChaCha20 and Poly1305 added to libcrypto and libssl 
-      o Support for extended master secret 
-      o CCM ciphersuites 
-      o Reworked test suite, now based on perl, Test::Harness and Test::More 
-      o *Most* libcrypto and libssl public structures were made opaque, 
-        including: 
-        BIGNUM and associated types, EC_KEY and EC_KEY_METHOD, 
-        DH and DH_METHOD, DSA and DSA_METHOD, RSA and RSA_METHOD, 
-        BIO and BIO_METHOD, EVP_MD_CTX, EVP_MD, EVP_CIPHER_CTX, 
-        EVP_CIPHER, EVP_PKEY and associated types, HMAC_CTX, 
-        X509, X509_CRL, X509_OBJECT, X509_STORE_CTX, X509_STORE, 
-        X509_LOOKUP, X509_LOOKUP_METHOD 
-      o libssl internal structures made opaque 
-      o SSLv2 support removed 
-      o Kerberos ciphersuite support removed 
-      o RC4 removed from DEFAULT ciphersuites in libssl 
-      o 40 and 56 bit cipher support removed from libssl 
-      o All public header files moved to include/openssl, no more symlinking 
-      o SSL/TLS state machine, version negotiation and record layer rewritten 
-      o EC revision: now operations use new EC_KEY_METHOD. 
-      o Support for OCB mode added to libcrypto 
-      o Support for asynchronous crypto operations added to libcrypto and libssl 
-      o Deprecated interfaces can now be disabled at build time either 
-        relative to the latest release via the "no-deprecated" Configure 
-        argument, or via the "--api=1.1.0|1.0.0|0.9.8" option. 
-      o Application software can be compiled with -DOPENSSL_API_COMPAT=version 
-        to ensure that features deprecated in that version are not exposed. 
-      o Support for RFC6698/RFC7671 DANE TLSA peer authentication 
-      o Change of Configure to use --prefix as the main installation 
-        directory location rather than --openssldir.  The latter becomes 
-        the directory for certs, private key and openssl.cnf exclusively. 
-      o Reworked BIO networking library, with full support for IPv6. 
-      o New "unified" build system 
-      o New security levels 
-      o Support for scrypt algorithm 
-      o Support for X25519 
-      o Extended SSL_CONF support using configuration files 
-      o KDF algorithm support. Implement TLS PRF as a KDF. 
-      o Support for Certificate Transparency 
-      o HKDF support. 
- 
-  Major changes between OpenSSL 1.0.2g and OpenSSL 1.0.2h [3 May 2016] 
- 
-      o Prevent padding oracle in AES-NI CBC MAC check (CVE-2016-2107) 
-      o Fix EVP_EncodeUpdate overflow (CVE-2016-2105) 
-      o Fix EVP_EncryptUpdate overflow (CVE-2016-2106) 
-      o Prevent ASN.1 BIO excessive memory allocation (CVE-2016-2109) 
-      o EBCDIC overread (CVE-2016-2176) 
-      o Modify behavior of ALPN to invoke callback after SNI/servername 
-        callback, such that updates to the SSL_CTX affect ALPN. 
-      o Remove LOW from the DEFAULT cipher list.  This removes singles DES from 
-        the default. 
-      o Only remove the SSLv2 methods with the no-ssl2-method option. 
- 
-  Major changes between OpenSSL 1.0.2f and OpenSSL 1.0.2g [1 Mar 2016] 
- 
-      o Disable weak ciphers in SSLv3 and up in default builds of OpenSSL. 
-      o Disable SSLv2 default build, default negotiation and weak ciphers 
-        (CVE-2016-0800) 
-      o Fix a double-free in DSA code (CVE-2016-0705) 
-      o Disable SRP fake user seed to address a server memory leak 
-        (CVE-2016-0798) 
-      o Fix BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption 
-        (CVE-2016-0797) 
-      o Fix memory issues in BIO_*printf functions (CVE-2016-0799) 
-      o Fix side channel attack on modular exponentiation (CVE-2016-0702) 
- 
-  Major changes between OpenSSL 1.0.2e and OpenSSL 1.0.2f [28 Jan 2016] 
- 
-      o DH small subgroups (CVE-2016-0701) 
-      o SSLv2 doesn't block disabled ciphers (CVE-2015-3197) 
- 
-  Major changes between OpenSSL 1.0.2d and OpenSSL 1.0.2e [3 Dec 2015] 
- 
-      o BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193) 
-      o Certificate verify crash with missing PSS parameter (CVE-2015-3194) 
-      o X509_ATTRIBUTE memory leak (CVE-2015-3195) 
-      o Rewrite EVP_DecodeUpdate (base64 decoding) to fix several bugs 
-      o In DSA_generate_parameters_ex, if the provided seed is too short, 
-        return an error 
- 
-  Major changes between OpenSSL 1.0.2c and OpenSSL 1.0.2d [9 Jul 2015] 
- 
-      o Alternate chains certificate forgery (CVE-2015-1793) 
-      o Race condition handling PSK identify hint (CVE-2015-3196) 
- 
-  Major changes between OpenSSL 1.0.2b and OpenSSL 1.0.2c [12 Jun 2015] 
- 
-      o Fix HMAC ABI incompatibility 
- 
-  Major changes between OpenSSL 1.0.2a and OpenSSL 1.0.2b [11 Jun 2015] 
- 
-      o Malformed ECParameters causes infinite loop (CVE-2015-1788) 
-      o Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789) 
-      o PKCS7 crash with missing EnvelopedContent (CVE-2015-1790) 
-      o CMS verify infinite loop with unknown hash function (CVE-2015-1792) 
-      o Race condition handling NewSessionTicket (CVE-2015-1791) 
- 
-  Major changes between OpenSSL 1.0.2 and OpenSSL 1.0.2a [19 Mar 2015] 
- 
-      o OpenSSL 1.0.2 ClientHello sigalgs DoS fix (CVE-2015-0291) 
-      o Multiblock corrupted pointer fix (CVE-2015-0290) 
-      o Segmentation fault in DTLSv1_listen fix (CVE-2015-0207) 
-      o Segmentation fault in ASN1_TYPE_cmp fix (CVE-2015-0286) 
-      o Segmentation fault for invalid PSS parameters fix (CVE-2015-0208) 
-      o ASN.1 structure reuse memory corruption fix (CVE-2015-0287) 
-      o PKCS7 NULL pointer dereferences fix (CVE-2015-0289) 
-      o DoS via reachable assert in SSLv2 servers fix (CVE-2015-0293) 
-      o Empty CKE with client auth and DHE fix (CVE-2015-1787) 
-      o Handshake with unseeded PRNG fix (CVE-2015-0285) 
-      o Use After Free following d2i_ECPrivatekey error fix (CVE-2015-0209) 
-      o X509_to_X509_REQ NULL pointer deref fix (CVE-2015-0288) 
-      o Removed the export ciphers from the DEFAULT ciphers 
- 
-  Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.2 [22 Jan 2015]: 
- 
-      o Suite B support for TLS 1.2 and DTLS 1.2 
-      o Support for DTLS 1.2 
-      o TLS automatic EC curve selection. 
-      o API to set TLS supported signature algorithms and curves 
-      o SSL_CONF configuration API. 
-      o TLS Brainpool support. 
-      o ALPN support. 
-      o CMS support for RSA-PSS, RSA-OAEP, ECDH and X9.42 DH. 
- 
-  Major changes between OpenSSL 1.0.1k and OpenSSL 1.0.1l [15 Jan 2015] 
- 
-      o Build fixes for the Windows and OpenVMS platforms 
- 
-  Major changes between OpenSSL 1.0.1j and OpenSSL 1.0.1k [8 Jan 2015] 
- 
-      o Fix for CVE-2014-3571 
-      o Fix for CVE-2015-0206 
-      o Fix for CVE-2014-3569 
-      o Fix for CVE-2014-3572 
-      o Fix for CVE-2015-0204 
-      o Fix for CVE-2015-0205 
-      o Fix for CVE-2014-8275 
-      o Fix for CVE-2014-3570 
- 
-  Major changes between OpenSSL 1.0.1i and OpenSSL 1.0.1j [15 Oct 2014] 
- 
-      o Fix for CVE-2014-3513 
-      o Fix for CVE-2014-3567 
-      o Mitigation for CVE-2014-3566 (SSL protocol vulnerability) 
-      o Fix for CVE-2014-3568 
- 
-  Major changes between OpenSSL 1.0.1h and OpenSSL 1.0.1i [6 Aug 2014] 
- 
-      o Fix for CVE-2014-3512 
-      o Fix for CVE-2014-3511 
-      o Fix for CVE-2014-3510 
-      o Fix for CVE-2014-3507 
-      o Fix for CVE-2014-3506 
-      o Fix for CVE-2014-3505 
-      o Fix for CVE-2014-3509 
-      o Fix for CVE-2014-5139 
-      o Fix for CVE-2014-3508 
- 
-  Major changes between OpenSSL 1.0.1g and OpenSSL 1.0.1h [5 Jun 2014] 
- 
-      o Fix for CVE-2014-0224 
-      o Fix for CVE-2014-0221 
-      o Fix for CVE-2014-0198 
-      o Fix for CVE-2014-0195 
-      o Fix for CVE-2014-3470 
-      o Fix for CVE-2010-5298 
- 
-  Major changes between OpenSSL 1.0.1f and OpenSSL 1.0.1g [7 Apr 2014] 
- 
-      o Fix for CVE-2014-0160 
-      o Add TLS padding extension workaround for broken servers. 
-      o Fix for CVE-2014-0076 
- 
-  Major changes between OpenSSL 1.0.1e and OpenSSL 1.0.1f [6 Jan 2014] 
- 
-      o Don't include gmt_unix_time in TLS server and client random values 
-      o Fix for TLS record tampering bug CVE-2013-4353 
-      o Fix for TLS version checking bug CVE-2013-6449 
-      o Fix for DTLS retransmission bug CVE-2013-6450 
- 
-  Major changes between OpenSSL 1.0.1d and OpenSSL 1.0.1e [11 Feb 2013]: 
- 
-      o Corrected fix for CVE-2013-0169 
- 
-  Major changes between OpenSSL 1.0.1c and OpenSSL 1.0.1d [4 Feb 2013]: 
- 
-      o Fix renegotiation in TLS 1.1, 1.2 by using the correct TLS version. 
-      o Include the fips configuration module. 
-      o Fix OCSP bad key DoS attack CVE-2013-0166 
-      o Fix for SSL/TLS/DTLS CBC plaintext recovery attack CVE-2013-0169 
-      o Fix for TLS AESNI record handling flaw CVE-2012-2686 
- 
-  Major changes between OpenSSL 1.0.1b and OpenSSL 1.0.1c [10 May 2012]: 
- 
-      o Fix TLS/DTLS record length checking bug CVE-2012-2333 
-      o Don't attempt to use non-FIPS composite ciphers in FIPS mode. 
- 
-  Major changes between OpenSSL 1.0.1a and OpenSSL 1.0.1b [26 Apr 2012]: 
- 
-      o Fix compilation error on non-x86 platforms. 
-      o Make FIPS capable OpenSSL ciphers work in non-FIPS mode. 
-      o Fix SSL_OP_NO_TLSv1_1 clash with SSL_OP_ALL in OpenSSL 1.0.0 
- 
-  Major changes between OpenSSL 1.0.1 and OpenSSL 1.0.1a [19 Apr 2012]: 
- 
-      o Fix for ASN1 overflow bug CVE-2012-2110 
-      o Workarounds for some servers that hang on long client hellos. 
-      o Fix SEGV in AES code. 
- 
-  Major changes between OpenSSL 1.0.0h and OpenSSL 1.0.1 [14 Mar 2012]: 
- 
-      o TLS/DTLS heartbeat support. 
-      o SCTP support. 
-      o RFC 5705 TLS key material exporter. 
-      o RFC 5764 DTLS-SRTP negotiation. 
-      o Next Protocol Negotiation. 
-      o PSS signatures in certificates, requests and CRLs. 
-      o Support for password based recipient info for CMS. 
-      o Support TLS v1.2 and TLS v1.1. 
-      o Preliminary FIPS capability for unvalidated 2.0 FIPS module. 
-      o SRP support. 
- 
-  Major changes between OpenSSL 1.0.0g and OpenSSL 1.0.0h [12 Mar 2012]: 
- 
-      o Fix for CMS/PKCS#7 MMA CVE-2012-0884 
-      o Corrected fix for CVE-2011-4619 
-      o Various DTLS fixes. 
- 
-  Major changes between OpenSSL 1.0.0f and OpenSSL 1.0.0g [18 Jan 2012]: 
- 
-      o Fix for DTLS DoS issue CVE-2012-0050 
- 
-  Major changes between OpenSSL 1.0.0e and OpenSSL 1.0.0f [4 Jan 2012]: 
- 
-      o Fix for DTLS plaintext recovery attack CVE-2011-4108 
-      o Clear block padding bytes of SSL 3.0 records CVE-2011-4576 
-      o Only allow one SGC handshake restart for SSL/TLS CVE-2011-4619 
-      o Check parameters are not NULL in GOST ENGINE CVE-2012-0027 
-      o Check for malformed RFC3779 data CVE-2011-4577 
- 
-  Major changes between OpenSSL 1.0.0d and OpenSSL 1.0.0e [6 Sep 2011]: 
- 
-      o Fix for CRL vulnerability issue CVE-2011-3207 
-      o Fix for ECDH crashes CVE-2011-3210 
-      o Protection against EC timing attacks. 
-      o Support ECDH ciphersuites for certificates using SHA2 algorithms. 
-      o Various DTLS fixes. 
- 
-  Major changes between OpenSSL 1.0.0c and OpenSSL 1.0.0d [8 Feb 2011]: 
- 
-      o Fix for security issue CVE-2011-0014 
- 
-  Major changes between OpenSSL 1.0.0b and OpenSSL 1.0.0c [2 Dec 2010]: 
- 
-      o Fix for security issue CVE-2010-4180 
-      o Fix for CVE-2010-4252 
-      o Fix mishandling of absent EC point format extension. 
-      o Fix various platform compilation issues. 
-      o Corrected fix for security issue CVE-2010-3864. 
- 
-  Major changes between OpenSSL 1.0.0a and OpenSSL 1.0.0b [16 Nov 2010]: 
- 
-      o Fix for security issue CVE-2010-3864. 
-      o Fix for CVE-2010-2939 
-      o Fix WIN32 build system for GOST ENGINE. 
- 
-  Major changes between OpenSSL 1.0.0 and OpenSSL 1.0.0a [1 Jun 2010]: 
- 
-      o Fix for security issue CVE-2010-1633. 
-      o GOST MAC and CFB fixes. 
- 
-  Major changes between OpenSSL 0.9.8n and OpenSSL 1.0.0 [29 Mar 2010]: 
- 
-      o RFC3280 path validation: sufficient to process PKITS tests. 
-      o Integrated support for PVK files and keyblobs. 
-      o Change default private key format to PKCS#8. 
-      o CMS support: able to process all examples in RFC4134 
-      o Streaming ASN1 encode support for PKCS#7 and CMS. 
-      o Multiple signer and signer add support for PKCS#7 and CMS. 
-      o ASN1 printing support. 
-      o Whirlpool hash algorithm added. 
-      o RFC3161 time stamp support. 
-      o New generalised public key API supporting ENGINE based algorithms. 
-      o New generalised public key API utilities. 
-      o New ENGINE supporting GOST algorithms. 
-      o SSL/TLS GOST ciphersuite support. 
-      o PKCS#7 and CMS GOST support. 
-      o RFC4279 PSK ciphersuite support. 
-      o Supported points format extension for ECC ciphersuites. 
-      o ecdsa-with-SHA224/256/384/512 signature types. 
-      o dsa-with-SHA224 and dsa-with-SHA256 signature types. 
-      o Opaque PRF Input TLS extension support. 
-      o Updated time routines to avoid OS limitations. 
- 
-  Major changes between OpenSSL 0.9.8m and OpenSSL 0.9.8n [24 Mar 2010]: 
- 
-      o CFB cipher definition fixes. 
-      o Fix security issues CVE-2010-0740 and CVE-2010-0433. 
- 
-  Major changes between OpenSSL 0.9.8l and OpenSSL 0.9.8m [25 Feb 2010]: 
- 
-      o Cipher definition fixes. 
-      o Workaround for slow RAND_poll() on some WIN32 versions. 
-      o Remove MD2 from algorithm tables. 
-      o SPKAC handling fixes. 
-      o Support for RFC5746 TLS renegotiation extension. 
-      o Compression memory leak fixed. 
-      o Compression session resumption fixed. 
-      o Ticket and SNI coexistence fixes. 
-      o Many fixes to DTLS handling. 
- 
-  Major changes between OpenSSL 0.9.8k and OpenSSL 0.9.8l [5 Nov 2009]: 
- 
-      o Temporary work around for CVE-2009-3555: disable renegotiation. 
- 
-  Major changes between OpenSSL 0.9.8j and OpenSSL 0.9.8k [25 Mar 2009]: 
- 
-      o Fix various build issues. 
-      o Fix security issues (CVE-2009-0590, CVE-2009-0591, CVE-2009-0789) 
- 
-  Major changes between OpenSSL 0.9.8i and OpenSSL 0.9.8j [7 Jan 2009]: 
- 
-      o Fix security issue (CVE-2008-5077) 
-      o Merge FIPS 140-2 branch code. 
- 
-  Major changes between OpenSSL 0.9.8g and OpenSSL 0.9.8h [28 May 2008]: 
- 
-      o CryptoAPI ENGINE support. 
-      o Various precautionary measures. 
-      o Fix for bugs affecting certificate request creation. 
-      o Support for local machine keyset attribute in PKCS#12 files. 
- 
-  Major changes between OpenSSL 0.9.8f and OpenSSL 0.9.8g [19 Oct 2007]: 
- 
-      o Backport of CMS functionality to 0.9.8. 
-      o Fixes for bugs introduced with 0.9.8f. 
- 
-  Major changes between OpenSSL 0.9.8e and OpenSSL 0.9.8f [11 Oct 2007]: 
- 
-      o Add gcc 4.2 support. 
-      o Add support for AES and SSE2 assembly language optimization 
-        for VC++ build. 
-      o Support for RFC4507bis and server name extensions if explicitly 
-        selected at compile time. 
-      o DTLS improvements. 
-      o RFC4507bis support. 
-      o TLS Extensions support. 
- 
-  Major changes between OpenSSL 0.9.8d and OpenSSL 0.9.8e [23 Feb 2007]: 
- 
-      o Various ciphersuite selection fixes. 
-      o RFC3779 support. 
- 
-  Major changes between OpenSSL 0.9.8c and OpenSSL 0.9.8d [28 Sep 2006]: 
- 
-      o Introduce limits to prevent malicious key DoS  (CVE-2006-2940) 
-      o Fix security issues (CVE-2006-2937, CVE-2006-3737, CVE-2006-4343) 
-      o Changes to ciphersuite selection algorithm 
- 
-  Major changes between OpenSSL 0.9.8b and OpenSSL 0.9.8c [5 Sep 2006]: 
- 
-      o Fix Daniel Bleichenbacher forged signature attack, CVE-2006-4339 
-      o New cipher Camellia 
- 
-  Major changes between OpenSSL 0.9.8a and OpenSSL 0.9.8b [4 May 2006]: 
- 
-      o Cipher string fixes. 
-      o Fixes for VC++ 2005. 
-      o Updated ECC cipher suite support. 
-      o New functions EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free(). 
-      o Zlib compression usage fixes. 
-      o Built in dynamic engine compilation support on Win32. 
-      o Fixes auto dynamic engine loading in Win32. 
- 
-  Major changes between OpenSSL 0.9.8 and OpenSSL 0.9.8a [11 Oct 2005]: 
- 
-      o Fix potential SSL 2.0 rollback, CVE-2005-2969 
-      o Extended Windows CE support 
- 
-  Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.8 [5 Jul 2005]: 
- 
-      o Major work on the BIGNUM library for higher efficiency and to 
-        make operations more streamlined and less contradictory.  This 
-        is the result of a major audit of the BIGNUM library. 
-      o Addition of BIGNUM functions for fields GF(2^m) and NIST 
-        curves, to support the Elliptic Crypto functions. 
-      o Major work on Elliptic Crypto; ECDH and ECDSA added, including 
-        the use through EVP, X509 and ENGINE. 
-      o New ASN.1 mini-compiler that's usable through the OpenSSL 
-        configuration file. 
-      o Added support for ASN.1 indefinite length constructed encoding. 
-      o New PKCS#12 'medium level' API to manipulate PKCS#12 files. 
-      o Complete rework of shared library construction and linking 
-        programs with shared or static libraries, through a separate 
-        Makefile.shared. 
-      o Rework of the passing of parameters from one Makefile to another. 
-      o Changed ENGINE framework to load dynamic engine modules 
-        automatically from specifically given directories. 
-      o New structure and ASN.1 functions for CertificatePair. 
-      o Changed the ZLIB compression method to be stateful. 
-      o Changed the key-generation and primality testing "progress" 
-        mechanism to take a structure that contains the ticker 
-        function and an argument. 
-      o New engine module: GMP (performs private key exponentiation). 
-      o New engine module: VIA PadLOck ACE extension in VIA C3 
-        Nehemiah processors. 
-      o Added support for IPv6 addresses in certificate extensions. 
-        See RFC 1884, section 2.2. 
-      o Added support for certificate policy mappings, policy 
-        constraints and name constraints. 
-      o Added support for multi-valued AVAs in the OpenSSL 
-        configuration file. 
-      o Added support for multiple certificates with the same subject 
-        in the 'openssl ca' index file. 
-      o Make it possible to create self-signed certificates using 
-        'openssl ca -selfsign'. 
-      o Make it possible to generate a serial number file with 
-        'openssl ca -create_serial'. 
-      o New binary search functions with extended functionality. 
-      o New BUF functions. 
-      o New STORE structure and library to provide an interface to all 
-        sorts of data repositories.  Supports storage of public and 
-        private keys, certificates, CRLs, numbers and arbitrary blobs. 
-        This library is unfortunately unfinished and unused within 
-        OpenSSL. 
-      o New control functions for the error stack. 
-      o Changed the PKCS#7 library to support one-pass S/MIME 
-        processing. 
-      o Added the possibility to compile without old deprecated 
-        functionality with the OPENSSL_NO_DEPRECATED macro or the 
-        'no-deprecated' argument to the config and Configure scripts. 
-      o Constification of all ASN.1 conversion functions, and other 
-        affected functions. 
-      o Improved platform support for PowerPC. 
-      o New FIPS 180-2 algorithms (SHA-224, -256, -384 and -512). 
-      o New X509_VERIFY_PARAM structure to support parameterisation 
-        of X.509 path validation. 
-      o Major overhaul of RC4 performance on Intel P4, IA-64 and 
-        AMD64. 
-      o Changed the Configure script to have some algorithms disabled 
-        by default.  Those can be explicitly enabled with the new 
-        argument form 'enable-xxx'. 
-      o Change the default digest in 'openssl' commands from MD5 to 
-        SHA-1. 
-      o Added support for DTLS. 
-      o New BIGNUM blinding. 
-      o Added support for the RSA-PSS encryption scheme 
-      o Added support for the RSA X.931 padding. 
-      o Added support for BSD sockets on NetWare. 
-      o Added support for files larger than 2GB. 
-      o Added initial support for Win64. 
-      o Added alternate pkg-config files. 
- 
-  Major changes between OpenSSL 0.9.7l and OpenSSL 0.9.7m [23 Feb 2007]: 
- 
-      o FIPS 1.1.1 module linking. 
-      o Various ciphersuite selection fixes. 
- 
-  Major changes between OpenSSL 0.9.7k and OpenSSL 0.9.7l [28 Sep 2006]: 
- 
-      o Introduce limits to prevent malicious key DoS  (CVE-2006-2940) 
-      o Fix security issues (CVE-2006-2937, CVE-2006-3737, CVE-2006-4343) 
- 
-  Major changes between OpenSSL 0.9.7j and OpenSSL 0.9.7k [5 Sep 2006]: 
- 
-      o Fix Daniel Bleichenbacher forged signature attack, CVE-2006-4339 
- 
-  Major changes between OpenSSL 0.9.7i and OpenSSL 0.9.7j [4 May 2006]: 
- 
-      o Visual C++ 2005 fixes. 
-      o Update Windows build system for FIPS. 
- 
-  Major changes between OpenSSL 0.9.7h and OpenSSL 0.9.7i [14 Oct 2005]: 
- 
-      o Give EVP_MAX_MD_SIZE its old value, except for a FIPS build. 
- 
-  Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.7h [11 Oct 2005]: 
- 
-      o Fix SSL 2.0 Rollback, CVE-2005-2969 
-      o Allow use of fixed-length exponent on DSA signing 
-      o Default fixed-window RSA, DSA, DH private-key operations 
- 
-  Major changes between OpenSSL 0.9.7f and OpenSSL 0.9.7g [11 Apr 2005]: 
- 
-      o More compilation issues fixed. 
-      o Adaptation to more modern Kerberos API. 
-      o Enhanced or corrected configuration for Solaris64, Mingw and Cygwin. 
-      o Enhanced x86_64 assembler BIGNUM module. 
-      o More constification. 
-      o Added processing of proxy certificates (RFC 3820). 
- 
-  Major changes between OpenSSL 0.9.7e and OpenSSL 0.9.7f [22 Mar 2005]: 
- 
-      o Several compilation issues fixed. 
-      o Many memory allocation failure checks added. 
-      o Improved comparison of X509 Name type. 
-      o Mandatory basic checks on certificates. 
-      o Performance improvements. 
- 
-  Major changes between OpenSSL 0.9.7d and OpenSSL 0.9.7e [25 Oct 2004]: 
- 
-      o Fix race condition in CRL checking code. 
-      o Fixes to PKCS#7 (S/MIME) code. 
- 
-  Major changes between OpenSSL 0.9.7c and OpenSSL 0.9.7d [17 Mar 2004]: 
- 
-      o Security: Fix Kerberos ciphersuite SSL/TLS handshaking bug 
-      o Security: Fix null-pointer assignment in do_change_cipher_spec() 
-      o Allow multiple active certificates with same subject in CA index 
-      o Multiple X509 verification fixes 
-      o Speed up HMAC and other operations 
- 
-  Major changes between OpenSSL 0.9.7b and OpenSSL 0.9.7c [30 Sep 2003]: 
- 
-      o Security: fix various ASN1 parsing bugs. 
-      o New -ignore_err option to OCSP utility. 
-      o Various interop and bug fixes in S/MIME code. 
-      o SSL/TLS protocol fix for unrequested client certificates. 
- 
-  Major changes between OpenSSL 0.9.7a and OpenSSL 0.9.7b [10 Apr 2003]: 
- 
-      o Security: counter the Klima-Pokorny-Rosa extension of 
-        Bleichbacher's attack 
-      o Security: make RSA blinding default. 
-      o Configuration: Irix fixes, AIX fixes, better mingw support. 
-      o Support for new platforms: linux-ia64-ecc. 
-      o Build: shared library support fixes. 
-      o ASN.1: treat domainComponent correctly. 
-      o Documentation: fixes and additions. 
- 
-  Major changes between OpenSSL 0.9.7 and OpenSSL 0.9.7a [19 Feb 2003]: 
- 
-      o Security: Important security related bugfixes. 
-      o Enhanced compatibility with MIT Kerberos. 
-      o Can be built without the ENGINE framework. 
-      o IA32 assembler enhancements. 
-      o Support for new platforms: FreeBSD/IA64 and FreeBSD/Sparc64. 
-      o Configuration: the no-err option now works properly. 
-      o SSL/TLS: now handles manual certificate chain building. 
-      o SSL/TLS: certain session ID malfunctions corrected. 
- 
-  Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.7 [30 Dec 2002]: 
- 
-      o New library section OCSP. 
-      o Complete rewrite of ASN1 code. 
-      o CRL checking in verify code and openssl utility. 
-      o Extension copying in 'ca' utility. 
-      o Flexible display options in 'ca' utility. 
-      o Provisional support for international characters with UTF8. 
-      o Support for external crypto devices ('engine') is no longer 
-        a separate distribution. 
-      o New elliptic curve library section. 
-      o New AES (Rijndael) library section. 
-      o Support for new platforms: Windows CE, Tandem OSS, A/UX, AIX 64-bit, 
-        Linux x86_64, Linux 64-bit on Sparc v9 
-      o Extended support for some platforms: VxWorks 
-      o Enhanced support for shared libraries. 
-      o Now only builds PIC code when shared library support is requested. 
-      o Support for pkg-config. 
-      o Lots of new manuals. 
-      o Makes symbolic links to or copies of manuals to cover all described 
-        functions. 
-      o Change DES API to clean up the namespace (some applications link also 
-        against libdes providing similar functions having the same name). 
-        Provide macros for backward compatibility (will be removed in the 
-        future). 
-      o Unify handling of cryptographic algorithms (software and engine) 
-        to be available via EVP routines for asymmetric and symmetric ciphers. 
-      o NCONF: new configuration handling routines. 
-      o Change API to use more 'const' modifiers to improve error checking 
-        and help optimizers. 
-      o Finally remove references to RSAref. 
-      o Reworked parts of the BIGNUM code. 
-      o Support for new engines: Broadcom ubsec, Accelerated Encryption 
-        Processing, IBM 4758. 
-      o A few new engines added in the demos area. 
-      o Extended and corrected OID (object identifier) table. 
-      o PRNG: query at more locations for a random device, automatic query for 
-        EGD style random sources at several locations. 
-      o SSL/TLS: allow optional cipher choice according to server's preference. 
-      o SSL/TLS: allow server to explicitly set new session ids. 
-      o SSL/TLS: support Kerberos cipher suites (RFC2712). 
-        Only supports MIT Kerberos for now. 
-      o SSL/TLS: allow more precise control of renegotiations and sessions. 
-      o SSL/TLS: add callback to retrieve SSL/TLS messages. 
-      o SSL/TLS: support AES cipher suites (RFC3268). 
- 
-  Major changes between OpenSSL 0.9.6j and OpenSSL 0.9.6k [30 Sep 2003]: 
- 
-      o Security: fix various ASN1 parsing bugs. 
-      o SSL/TLS protocol fix for unrequested client certificates. 
- 
-  Major changes between OpenSSL 0.9.6i and OpenSSL 0.9.6j [10 Apr 2003]: 
- 
-      o Security: counter the Klima-Pokorny-Rosa extension of 
-        Bleichbacher's attack 
-      o Security: make RSA blinding default. 
-      o Build: shared library support fixes. 
- 
-  Major changes between OpenSSL 0.9.6h and OpenSSL 0.9.6i [19 Feb 2003]: 
- 
-      o Important security related bugfixes. 
- 
-  Major changes between OpenSSL 0.9.6g and OpenSSL 0.9.6h [5 Dec 2002]: 
- 
-      o New configuration targets for Tandem OSS and A/UX. 
-      o New OIDs for Microsoft attributes. 
-      o Better handling of SSL session caching. 
-      o Better comparison of distinguished names. 
-      o Better handling of shared libraries in a mixed GNU/non-GNU environment. 
-      o Support assembler code with Borland C. 
-      o Fixes for length problems. 
-      o Fixes for uninitialised variables. 
-      o Fixes for memory leaks, some unusual crashes and some race conditions. 
-      o Fixes for smaller building problems. 
-      o Updates of manuals, FAQ and other instructive documents. 
- 
-  Major changes between OpenSSL 0.9.6f and OpenSSL 0.9.6g [9 Aug 2002]: 
- 
-      o Important building fixes on Unix. 
- 
-  Major changes between OpenSSL 0.9.6e and OpenSSL 0.9.6f [8 Aug 2002]: 
- 
-      o Various important bugfixes. 
- 
-  Major changes between OpenSSL 0.9.6d and OpenSSL 0.9.6e [30 Jul 2002]: 
- 
-      o Important security related bugfixes. 
-      o Various SSL/TLS library bugfixes. 
- 
-  Major changes between OpenSSL 0.9.6c and OpenSSL 0.9.6d [9 May 2002]: 
- 
-      o Various SSL/TLS library bugfixes. 
-      o Fix DH parameter generation for 'non-standard' generators. 
- 
-  Major changes between OpenSSL 0.9.6b and OpenSSL 0.9.6c [21 Dec 2001]: 
- 
-      o Various SSL/TLS library bugfixes. 
-      o BIGNUM library fixes. 
-      o RSA OAEP and random number generation fixes. 
-      o Object identifiers corrected and added. 
-      o Add assembler BN routines for IA64. 
-      o Add support for OS/390 Unix, UnixWare with gcc, OpenUNIX 8, 
-        MIPS Linux; shared library support for Irix, HP-UX. 
-      o Add crypto accelerator support for AEP, Baltimore SureWare, 
-        Broadcom and Cryptographic Appliance's keyserver 
-        [in 0.9.6c-engine release]. 
- 
-  Major changes between OpenSSL 0.9.6a and OpenSSL 0.9.6b [9 Jul 2001]: 
- 
-      o Security fix: PRNG improvements. 
-      o Security fix: RSA OAEP check. 
-      o Security fix: Reinsert and fix countermeasure to Bleichbacher's 
-        attack. 
-      o MIPS bug fix in BIGNUM. 
-      o Bug fix in "openssl enc". 
-      o Bug fix in X.509 printing routine. 
-      o Bug fix in DSA verification routine and DSA S/MIME verification. 
-      o Bug fix to make PRNG thread-safe. 
-      o Bug fix in RAND_file_name(). 
-      o Bug fix in compatibility mode trust settings. 
-      o Bug fix in blowfish EVP. 
-      o Increase default size for BIO buffering filter. 
-      o Compatibility fixes in some scripts. 
- 
-  Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.6a [5 Apr 2001]: 
- 
-      o Security fix: change behavior of OpenSSL to avoid using 
-        environment variables when running as root. 
-      o Security fix: check the result of RSA-CRT to reduce the 
-        possibility of deducing the private key from an incorrectly 
-        calculated signature. 
-      o Security fix: prevent Bleichenbacher's DSA attack. 
-      o Security fix: Zero the premaster secret after deriving the 
-        master secret in DH ciphersuites. 
-      o Reimplement SSL_peek(), which had various problems. 
-      o Compatibility fix: the function des_encrypt() renamed to 
-        des_encrypt1() to avoid clashes with some Unixen libc. 
-      o Bug fixes for Win32, HP/UX and Irix. 
-      o Bug fixes in BIGNUM, SSL, PKCS#7, PKCS#12, X.509, CONF and 
-        memory checking routines. 
-      o Bug fixes for RSA operations in threaded environments. 
-      o Bug fixes in misc. openssl applications. 
-      o Remove a few potential memory leaks. 
-      o Add tighter checks of BIGNUM routines. 
-      o Shared library support has been reworked for generality. 
-      o More documentation. 
-      o New function BN_rand_range(). 
-      o Add "-rand" option to openssl s_client and s_server. 
- 
-  Major changes between OpenSSL 0.9.5a and OpenSSL 0.9.6 [10 Oct 2000]: 
- 
-      o Some documentation for BIO and SSL libraries. 
-      o Enhanced chain verification using key identifiers. 
-      o New sign and verify options to 'dgst' application. 
-      o Support for DER and PEM encoded messages in 'smime' application. 
-      o New 'rsautl' application, low level RSA utility. 
-      o MD4 now included. 
-      o Bugfix for SSL rollback padding check. 
-      o Support for external crypto devices [1]. 
-      o Enhanced EVP interface. 
- 
-    [1] The support for external crypto devices is currently a separate 
-        distribution.  See the file README.ENGINE. 
- 
-  Major changes between OpenSSL 0.9.5 and OpenSSL 0.9.5a [1 Apr 2000]: 
- 
-      o Bug fixes for Win32, SuSE Linux, NeXTSTEP and FreeBSD 2.2.8 
-      o Shared library support for HPUX and Solaris-gcc 
-      o Support of Linux/IA64 
-      o Assembler support for Mingw32 
-      o New 'rand' application 
-      o New way to check for existence of algorithms from scripts 
- 
-  Major changes between OpenSSL 0.9.4 and OpenSSL 0.9.5 [25 May 2000]: 
- 
-      o S/MIME support in new 'smime' command 
-      o Documentation for the OpenSSL command line application 
-      o Automation of 'req' application 
-      o Fixes to make s_client, s_server work under Windows 
-      o Support for multiple fieldnames in SPKACs 
-      o New SPKAC command line utility and associated library functions 
-      o Options to allow passwords to be obtained from various sources 
-      o New public key PEM format and options to handle it 
-      o Many other fixes and enhancements to command line utilities 
-      o Usable certificate chain verification 
-      o Certificate purpose checking 
-      o Certificate trust settings 
-      o Support of authority information access extension 
-      o Extensions in certificate requests 
-      o Simplified X509 name and attribute routines 
-      o Initial (incomplete) support for international character sets 
-      o New DH_METHOD, DSA_METHOD and enhanced RSA_METHOD 
-      o Read only memory BIOs and simplified creation function 
-      o TLS/SSL protocol bugfixes: Accept TLS 'client hello' in SSL 3.0 
-        record; allow fragmentation and interleaving of handshake and other 
-        data 
-      o TLS/SSL code now "tolerates" MS SGC 
-      o Work around for Netscape client certificate hang bug 
-      o RSA_NULL option that removes RSA patent code but keeps other 
-        RSA functionality 
-      o Memory leak detection now allows applications to add extra information 
-        via a per-thread stack 
-      o PRNG robustness improved 
-      o EGD support 
-      o BIGNUM library bug fixes 
-      o Faster DSA parameter generation 
-      o Enhanced support for Alpha Linux 
-      o Experimental MacOS support 
- 
-  Major changes between OpenSSL 0.9.3 and OpenSSL 0.9.4 [9 Aug 1999]: 
- 
-      o Transparent support for PKCS#8 format private keys: these are used 
-        by several software packages and are more secure than the standard 
-        form 
-      o PKCS#5 v2.0 implementation 
-      o Password callbacks have a new void * argument for application data 
-      o Avoid various memory leaks 
-      o New pipe-like BIO that allows using the SSL library when actual I/O 
-        must be handled by the application (BIO pair) 
- 
-  Major changes between OpenSSL 0.9.2b and OpenSSL 0.9.3 [24 May 1999]: 
-      o Lots of enhancements and cleanups to the Configuration mechanism 
-      o RSA OEAP related fixes 
-      o Added `openssl ca -revoke' option for revoking a certificate 
-      o Source cleanups: const correctness, type-safe stacks and ASN.1 SETs 
-      o Source tree cleanups: removed lots of obsolete files 
-      o Thawte SXNet, certificate policies and CRL distribution points 
-        extension support 
-      o Preliminary (experimental) S/MIME support 
-      o Support for ASN.1 UTF8String and VisibleString 
-      o Full integration of PKCS#12 code 
-      o Sparc assembler bignum implementation, optimized hash functions 
-      o Option to disable selected ciphers 
- 
-  Major changes between OpenSSL 0.9.1c and OpenSSL 0.9.2b [22 Mar 1999]: 
-      o Fixed a security hole related to session resumption 
-      o Fixed RSA encryption routines for the p < q case 
-      o "ALL" in cipher lists now means "everything except NULL ciphers" 
-      o Support for Triple-DES CBCM cipher 
-      o Support of Optimal Asymmetric Encryption Padding (OAEP) for RSA 
-      o First support for new TLSv1 ciphers 
-      o Added a few new BIOs (syslog BIO, reliable BIO) 
-      o Extended support for DSA certificate/keys. 
-      o Extended support for Certificate Signing Requests (CSR) 
-      o Initial support for X.509v3 extensions 
-      o Extended support for compression inside the SSL record layer 
-      o Overhauled Win32 builds 
-      o Cleanups and fixes to the Big Number (BN) library 
-      o Support for ASN.1 GeneralizedTime 
-      o Splitted ASN.1 SETs from SEQUENCEs 
-      o ASN1 and PEM support for Netscape Certificate Sequences 
-      o Overhauled Perl interface 
-      o Lots of source tree cleanups. 
-      o Lots of memory leak fixes. 
-      o Lots of bug fixes. 
- 
-  Major changes between SSLeay 0.9.0b and OpenSSL 0.9.1c [23 Dec 1998]: 
-      o Integration of the popular NO_RSA/NO_DSA patches 
-      o Initial support for compression inside the SSL record layer 
-      o Added BIO proxy and filtering functionality 
-      o Extended Big Number (BN) library 
-      o Added RIPE MD160 message digest 
-      o Added support for RC2/64bit cipher 
-      o Extended ASN.1 parser routines 
-      o Adjustments of the source tree for CVS 
-      o Support for various new platforms 
+  Major changes between OpenSSL 1.1.1c and OpenSSL 1.1.1d [10 Sep 2019]
+
+      o Fixed a fork protection issue (CVE-2019-1549)
+      o Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
+        (CVE-2019-1563)
+      o For built-in EC curves, ensure an EC_GROUP built from the curve name is
+        used even when parsing explicit parameters
+      o Compute ECC cofactors if not provided during EC_GROUP construction
+        (CVE-2019-1547)
+      o Early start up entropy quality from the DEVRANDOM seed source has been
+        improved for older Linux systems
+      o Correct the extended master secret constant on EBCDIC systems
+      o Use Windows installation paths in the mingw builds (CVE-2019-1552)
+      o Changed DH_check to accept parameters with order q and 2q subgroups
+      o Significantly reduce secure memory usage by the randomness pools
+      o Revert the DEVRANDOM_WAIT feature for Linux systems
+
+  Major changes between OpenSSL 1.1.1b and OpenSSL 1.1.1c [28 May 2019]
+
+      o Prevent over long nonces in ChaCha20-Poly1305 (CVE-2019-1543)
+
+  Major changes between OpenSSL 1.1.1a and OpenSSL 1.1.1b [26 Feb 2019]
+
+      o Change the info callback signals for the start and end of a post-handshake
+        message exchange in TLSv1.3.
+      o Fix a bug in DTLS over SCTP. This breaks interoperability with older versions
+        of OpenSSL like OpenSSL 1.1.0 and OpenSSL 1.0.2.
+
+  Major changes between OpenSSL 1.1.1 and OpenSSL 1.1.1a [20 Nov 2018]
+
+      o Timing vulnerability in DSA signature generation (CVE-2018-0734)
+      o Timing vulnerability in ECDSA signature generation (CVE-2018-0735)
+
+  Major changes between OpenSSL 1.1.0i and OpenSSL 1.1.1 [11 Sep 2018]
+
+      o Support for TLSv1.3 added (see https://wiki.openssl.org/index.php/TLS1.3
+        for further important information). The TLSv1.3 implementation includes:
+          o Fully compliant implementation of RFC8446 (TLSv1.3) on by default
+          o Early data (0-RTT)
+          o Post-handshake authentication and key update
+          o Middlebox Compatibility Mode
+          o TLSv1.3 PSKs
+          o Support for all five RFC8446 ciphersuites
+          o RSA-PSS signature algorithms (backported to TLSv1.2)
+          o Configurable session ticket support
+          o Stateless server support
+          o Rewrite of the packet construction code for "safer" packet handling
+          o Rewrite of the extension handling code
+      o Complete rewrite of the OpenSSL random number generator to introduce the
+        following capabilities
+          o The default RAND method now utilizes an AES-CTR DRBG according to
+            NIST standard SP 800-90Ar1.
+          o Support for multiple DRBG instances with seed chaining.
+          o There is a public and private DRBG instance.
+          o The DRBG instances are fork-safe.
+          o Keep all global DRBG instances on the secure heap if it is enabled.
+          o The public and private DRBG instance are per thread for lock free
+            operation
+      o Support for various new cryptographic algorithms including:
+          o SHA3
+          o SHA512/224 and SHA512/256
+          o EdDSA (both Ed25519 and Ed448) including X509 and TLS support
+          o X448 (adding to the existing X25519 support in 1.1.0)
+          o Multi-prime RSA
+          o SM2
+          o SM3
+          o SM4
+          o SipHash
+          o ARIA (including TLS support)
+      o Significant Side-Channel attack security improvements
+      o Add a new ClientHello callback to provide the ability to adjust the SSL
+        object at an early stage.
+      o Add 'Maximum Fragment Length' TLS extension negotiation and support
+      o A new STORE module, which implements a uniform and URI based reader of
+        stores that can contain keys, certificates, CRLs and numerous other
+        objects.
+      o Move the display of configuration data to configdata.pm.
+      o Allow GNU style "make variables" to be used with Configure.
+      o Claim the namespaces OSSL and OPENSSL, represented as symbol prefixes
+      o Rewrite of devcrypto engine
+
+  Major changes between OpenSSL 1.1.0h and OpenSSL 1.1.0i [under development]
+
+      o Client DoS due to large DH parameter (CVE-2018-0732)
+      o Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)
+
+  Major changes between OpenSSL 1.1.0g and OpenSSL 1.1.0h [under development]
+
+      o Constructed ASN.1 types with a recursive definition could exceed the
+        stack (CVE-2018-0739)
+      o Incorrect CRYPTO_memcmp on HP-UX PA-RISC (CVE-2018-0733)
+      o rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
+
+  Major changes between OpenSSL 1.1.0f and OpenSSL 1.1.0g [2 Nov 2017]
+
+      o bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
+      o Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)
+
+  Major changes between OpenSSL 1.1.0e and OpenSSL 1.1.0f [25 May 2017]
+
+      o config now recognises 64-bit mingw and chooses mingw64 instead of mingw
+
+  Major changes between OpenSSL 1.1.0d and OpenSSL 1.1.0e [16 Feb 2017]
+
+      o Encrypt-Then-Mac renegotiation crash (CVE-2017-3733)
+
+  Major changes between OpenSSL 1.1.0c and OpenSSL 1.1.0d [26 Jan 2017]
+
+      o Truncated packet could crash via OOB read (CVE-2017-3731)
+      o Bad (EC)DHE parameters cause a client crash (CVE-2017-3730)
+      o BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
+
+  Major changes between OpenSSL 1.1.0b and OpenSSL 1.1.0c [10 Nov 2016]
+
+      o ChaCha20/Poly1305 heap-buffer-overflow (CVE-2016-7054)
+      o CMS Null dereference (CVE-2016-7053)
+      o Montgomery multiplication may produce incorrect results (CVE-2016-7055)
+
+  Major changes between OpenSSL 1.1.0a and OpenSSL 1.1.0b [26 Sep 2016]
+
+      o Fix Use After Free for large message sizes (CVE-2016-6309)
+
+  Major changes between OpenSSL 1.1.0 and OpenSSL 1.1.0a [22 Sep 2016]
+
+      o OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
+      o SSL_peek() hang on empty record (CVE-2016-6305)
+      o Excessive allocation of memory in tls_get_message_header()
+       (CVE-2016-6307)
+      o Excessive allocation of memory in dtls1_preprocess_fragment()
+       (CVE-2016-6308)
+
+  Major changes between OpenSSL 1.0.2h and OpenSSL 1.1.0 [25 Aug 2016]
+
+      o Copyright text was shrunk to a boilerplate that points to the license
+      o "shared" builds are now the default when possible
+      o Added support for "pipelining"
+      o Added the AFALG engine
+      o New threading API implemented
+      o Support for ChaCha20 and Poly1305 added to libcrypto and libssl
+      o Support for extended master secret
+      o CCM ciphersuites
+      o Reworked test suite, now based on perl, Test::Harness and Test::More
+      o *Most* libcrypto and libssl public structures were made opaque,
+        including:
+        BIGNUM and associated types, EC_KEY and EC_KEY_METHOD,
+        DH and DH_METHOD, DSA and DSA_METHOD, RSA and RSA_METHOD,
+        BIO and BIO_METHOD, EVP_MD_CTX, EVP_MD, EVP_CIPHER_CTX,
+        EVP_CIPHER, EVP_PKEY and associated types, HMAC_CTX,
+        X509, X509_CRL, X509_OBJECT, X509_STORE_CTX, X509_STORE,
+        X509_LOOKUP, X509_LOOKUP_METHOD
+      o libssl internal structures made opaque
+      o SSLv2 support removed
+      o Kerberos ciphersuite support removed
+      o RC4 removed from DEFAULT ciphersuites in libssl
+      o 40 and 56 bit cipher support removed from libssl
+      o All public header files moved to include/openssl, no more symlinking
+      o SSL/TLS state machine, version negotiation and record layer rewritten
+      o EC revision: now operations use new EC_KEY_METHOD.
+      o Support for OCB mode added to libcrypto
+      o Support for asynchronous crypto operations added to libcrypto and libssl
+      o Deprecated interfaces can now be disabled at build time either
+        relative to the latest release via the "no-deprecated" Configure
+        argument, or via the "--api=1.1.0|1.0.0|0.9.8" option.
+      o Application software can be compiled with -DOPENSSL_API_COMPAT=version
+        to ensure that features deprecated in that version are not exposed.
+      o Support for RFC6698/RFC7671 DANE TLSA peer authentication
+      o Change of Configure to use --prefix as the main installation
+        directory location rather than --openssldir.  The latter becomes
+        the directory for certs, private key and openssl.cnf exclusively.
+      o Reworked BIO networking library, with full support for IPv6.
+      o New "unified" build system
+      o New security levels
+      o Support for scrypt algorithm
+      o Support for X25519
+      o Extended SSL_CONF support using configuration files
+      o KDF algorithm support. Implement TLS PRF as a KDF.
+      o Support for Certificate Transparency
+      o HKDF support.
+
+  Major changes between OpenSSL 1.0.2g and OpenSSL 1.0.2h [3 May 2016]
+
+      o Prevent padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
+      o Fix EVP_EncodeUpdate overflow (CVE-2016-2105)
+      o Fix EVP_EncryptUpdate overflow (CVE-2016-2106)
+      o Prevent ASN.1 BIO excessive memory allocation (CVE-2016-2109)
+      o EBCDIC overread (CVE-2016-2176)
+      o Modify behavior of ALPN to invoke callback after SNI/servername
+        callback, such that updates to the SSL_CTX affect ALPN.
+      o Remove LOW from the DEFAULT cipher list.  This removes singles DES from
+        the default.
+      o Only remove the SSLv2 methods with the no-ssl2-method option.
+
+  Major changes between OpenSSL 1.0.2f and OpenSSL 1.0.2g [1 Mar 2016]
+
+      o Disable weak ciphers in SSLv3 and up in default builds of OpenSSL.
+      o Disable SSLv2 default build, default negotiation and weak ciphers
+        (CVE-2016-0800)
+      o Fix a double-free in DSA code (CVE-2016-0705)
+      o Disable SRP fake user seed to address a server memory leak
+        (CVE-2016-0798)
+      o Fix BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption
+        (CVE-2016-0797)
+      o Fix memory issues in BIO_*printf functions (CVE-2016-0799)
+      o Fix side channel attack on modular exponentiation (CVE-2016-0702)
+
+  Major changes between OpenSSL 1.0.2e and OpenSSL 1.0.2f [28 Jan 2016]
+
+      o DH small subgroups (CVE-2016-0701)
+      o SSLv2 doesn't block disabled ciphers (CVE-2015-3197)
+
+  Major changes between OpenSSL 1.0.2d and OpenSSL 1.0.2e [3 Dec 2015]
+
+      o BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193)
+      o Certificate verify crash with missing PSS parameter (CVE-2015-3194)
+      o X509_ATTRIBUTE memory leak (CVE-2015-3195)
+      o Rewrite EVP_DecodeUpdate (base64 decoding) to fix several bugs
+      o In DSA_generate_parameters_ex, if the provided seed is too short,
+        return an error
+
+  Major changes between OpenSSL 1.0.2c and OpenSSL 1.0.2d [9 Jul 2015]
+
+      o Alternate chains certificate forgery (CVE-2015-1793)
+      o Race condition handling PSK identify hint (CVE-2015-3196)
+
+  Major changes between OpenSSL 1.0.2b and OpenSSL 1.0.2c [12 Jun 2015]
+
+      o Fix HMAC ABI incompatibility
+
+  Major changes between OpenSSL 1.0.2a and OpenSSL 1.0.2b [11 Jun 2015]
+
+      o Malformed ECParameters causes infinite loop (CVE-2015-1788)
+      o Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789)
+      o PKCS7 crash with missing EnvelopedContent (CVE-2015-1790)
+      o CMS verify infinite loop with unknown hash function (CVE-2015-1792)
+      o Race condition handling NewSessionTicket (CVE-2015-1791)
+
+  Major changes between OpenSSL 1.0.2 and OpenSSL 1.0.2a [19 Mar 2015]
+
+      o OpenSSL 1.0.2 ClientHello sigalgs DoS fix (CVE-2015-0291)
+      o Multiblock corrupted pointer fix (CVE-2015-0290)
+      o Segmentation fault in DTLSv1_listen fix (CVE-2015-0207)
+      o Segmentation fault in ASN1_TYPE_cmp fix (CVE-2015-0286)
+      o Segmentation fault for invalid PSS parameters fix (CVE-2015-0208)
+      o ASN.1 structure reuse memory corruption fix (CVE-2015-0287)
+      o PKCS7 NULL pointer dereferences fix (CVE-2015-0289)
+      o DoS via reachable assert in SSLv2 servers fix (CVE-2015-0293)
+      o Empty CKE with client auth and DHE fix (CVE-2015-1787)
+      o Handshake with unseeded PRNG fix (CVE-2015-0285)
+      o Use After Free following d2i_ECPrivatekey error fix (CVE-2015-0209)
+      o X509_to_X509_REQ NULL pointer deref fix (CVE-2015-0288)
+      o Removed the export ciphers from the DEFAULT ciphers
+
+  Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.2 [22 Jan 2015]:
+
+      o Suite B support for TLS 1.2 and DTLS 1.2
+      o Support for DTLS 1.2
+      o TLS automatic EC curve selection.
+      o API to set TLS supported signature algorithms and curves
+      o SSL_CONF configuration API.
+      o TLS Brainpool support.
+      o ALPN support.
+      o CMS support for RSA-PSS, RSA-OAEP, ECDH and X9.42 DH.
+
+  Major changes between OpenSSL 1.0.1k and OpenSSL 1.0.1l [15 Jan 2015]
+
+      o Build fixes for the Windows and OpenVMS platforms
+
+  Major changes between OpenSSL 1.0.1j and OpenSSL 1.0.1k [8 Jan 2015]
+
+      o Fix for CVE-2014-3571
+      o Fix for CVE-2015-0206
+      o Fix for CVE-2014-3569
+      o Fix for CVE-2014-3572
+      o Fix for CVE-2015-0204
+      o Fix for CVE-2015-0205
+      o Fix for CVE-2014-8275
+      o Fix for CVE-2014-3570
+
+  Major changes between OpenSSL 1.0.1i and OpenSSL 1.0.1j [15 Oct 2014]
+
+      o Fix for CVE-2014-3513
+      o Fix for CVE-2014-3567
+      o Mitigation for CVE-2014-3566 (SSL protocol vulnerability)
+      o Fix for CVE-2014-3568
+
+  Major changes between OpenSSL 1.0.1h and OpenSSL 1.0.1i [6 Aug 2014]
+
+      o Fix for CVE-2014-3512
+      o Fix for CVE-2014-3511
+      o Fix for CVE-2014-3510
+      o Fix for CVE-2014-3507
+      o Fix for CVE-2014-3506
+      o Fix for CVE-2014-3505
+      o Fix for CVE-2014-3509
+      o Fix for CVE-2014-5139
+      o Fix for CVE-2014-3508
+
+  Major changes between OpenSSL 1.0.1g and OpenSSL 1.0.1h [5 Jun 2014]
+
+      o Fix for CVE-2014-0224
+      o Fix for CVE-2014-0221
+      o Fix for CVE-2014-0198
+      o Fix for CVE-2014-0195
+      o Fix for CVE-2014-3470
+      o Fix for CVE-2010-5298
+
+  Major changes between OpenSSL 1.0.1f and OpenSSL 1.0.1g [7 Apr 2014]
+
+      o Fix for CVE-2014-0160
+      o Add TLS padding extension workaround for broken servers.
+      o Fix for CVE-2014-0076
+
+  Major changes between OpenSSL 1.0.1e and OpenSSL 1.0.1f [6 Jan 2014]
+
+      o Don't include gmt_unix_time in TLS server and client random values
+      o Fix for TLS record tampering bug CVE-2013-4353
+      o Fix for TLS version checking bug CVE-2013-6449
+      o Fix for DTLS retransmission bug CVE-2013-6450
+
+  Major changes between OpenSSL 1.0.1d and OpenSSL 1.0.1e [11 Feb 2013]:
+
+      o Corrected fix for CVE-2013-0169
+
+  Major changes between OpenSSL 1.0.1c and OpenSSL 1.0.1d [4 Feb 2013]:
+
+      o Fix renegotiation in TLS 1.1, 1.2 by using the correct TLS version.
+      o Include the fips configuration module.
+      o Fix OCSP bad key DoS attack CVE-2013-0166
+      o Fix for SSL/TLS/DTLS CBC plaintext recovery attack CVE-2013-0169
+      o Fix for TLS AESNI record handling flaw CVE-2012-2686
+
+  Major changes between OpenSSL 1.0.1b and OpenSSL 1.0.1c [10 May 2012]:
+
+      o Fix TLS/DTLS record length checking bug CVE-2012-2333
+      o Don't attempt to use non-FIPS composite ciphers in FIPS mode.
+
+  Major changes between OpenSSL 1.0.1a and OpenSSL 1.0.1b [26 Apr 2012]:
+
+      o Fix compilation error on non-x86 platforms.
+      o Make FIPS capable OpenSSL ciphers work in non-FIPS mode.
+      o Fix SSL_OP_NO_TLSv1_1 clash with SSL_OP_ALL in OpenSSL 1.0.0
+
+  Major changes between OpenSSL 1.0.1 and OpenSSL 1.0.1a [19 Apr 2012]:
+
+      o Fix for ASN1 overflow bug CVE-2012-2110
+      o Workarounds for some servers that hang on long client hellos.
+      o Fix SEGV in AES code.
+
+  Major changes between OpenSSL 1.0.0h and OpenSSL 1.0.1 [14 Mar 2012]:
+
+      o TLS/DTLS heartbeat support.
+      o SCTP support.
+      o RFC 5705 TLS key material exporter.
+      o RFC 5764 DTLS-SRTP negotiation.
+      o Next Protocol Negotiation.
+      o PSS signatures in certificates, requests and CRLs.
+      o Support for password based recipient info for CMS.
+      o Support TLS v1.2 and TLS v1.1.
+      o Preliminary FIPS capability for unvalidated 2.0 FIPS module.
+      o SRP support.
+
+  Major changes between OpenSSL 1.0.0g and OpenSSL 1.0.0h [12 Mar 2012]:
+
+      o Fix for CMS/PKCS#7 MMA CVE-2012-0884
+      o Corrected fix for CVE-2011-4619
+      o Various DTLS fixes.
+
+  Major changes between OpenSSL 1.0.0f and OpenSSL 1.0.0g [18 Jan 2012]:
+
+      o Fix for DTLS DoS issue CVE-2012-0050
+
+  Major changes between OpenSSL 1.0.0e and OpenSSL 1.0.0f [4 Jan 2012]:
+
+      o Fix for DTLS plaintext recovery attack CVE-2011-4108
+      o Clear block padding bytes of SSL 3.0 records CVE-2011-4576
+      o Only allow one SGC handshake restart for SSL/TLS CVE-2011-4619
+      o Check parameters are not NULL in GOST ENGINE CVE-2012-0027
+      o Check for malformed RFC3779 data CVE-2011-4577
+
+  Major changes between OpenSSL 1.0.0d and OpenSSL 1.0.0e [6 Sep 2011]:
+
+      o Fix for CRL vulnerability issue CVE-2011-3207
+      o Fix for ECDH crashes CVE-2011-3210
+      o Protection against EC timing attacks.
+      o Support ECDH ciphersuites for certificates using SHA2 algorithms.
+      o Various DTLS fixes.
+
+  Major changes between OpenSSL 1.0.0c and OpenSSL 1.0.0d [8 Feb 2011]:
+
+      o Fix for security issue CVE-2011-0014
+
+  Major changes between OpenSSL 1.0.0b and OpenSSL 1.0.0c [2 Dec 2010]:
+
+      o Fix for security issue CVE-2010-4180
+      o Fix for CVE-2010-4252
+      o Fix mishandling of absent EC point format extension.
+      o Fix various platform compilation issues.
+      o Corrected fix for security issue CVE-2010-3864.
+
+  Major changes between OpenSSL 1.0.0a and OpenSSL 1.0.0b [16 Nov 2010]:
+
+      o Fix for security issue CVE-2010-3864.
+      o Fix for CVE-2010-2939
+      o Fix WIN32 build system for GOST ENGINE.
+
+  Major changes between OpenSSL 1.0.0 and OpenSSL 1.0.0a [1 Jun 2010]:
+
+      o Fix for security issue CVE-2010-1633.
+      o GOST MAC and CFB fixes.
+
+  Major changes between OpenSSL 0.9.8n and OpenSSL 1.0.0 [29 Mar 2010]:
+
+      o RFC3280 path validation: sufficient to process PKITS tests.
+      o Integrated support for PVK files and keyblobs.
+      o Change default private key format to PKCS#8.
+      o CMS support: able to process all examples in RFC4134
+      o Streaming ASN1 encode support for PKCS#7 and CMS.
+      o Multiple signer and signer add support for PKCS#7 and CMS.
+      o ASN1 printing support.
+      o Whirlpool hash algorithm added.
+      o RFC3161 time stamp support.
+      o New generalised public key API supporting ENGINE based algorithms.
+      o New generalised public key API utilities.
+      o New ENGINE supporting GOST algorithms.
+      o SSL/TLS GOST ciphersuite support.
+      o PKCS#7 and CMS GOST support.
+      o RFC4279 PSK ciphersuite support.
+      o Supported points format extension for ECC ciphersuites.
+      o ecdsa-with-SHA224/256/384/512 signature types.
+      o dsa-with-SHA224 and dsa-with-SHA256 signature types.
+      o Opaque PRF Input TLS extension support.
+      o Updated time routines to avoid OS limitations.
+
+  Major changes between OpenSSL 0.9.8m and OpenSSL 0.9.8n [24 Mar 2010]:
+
+      o CFB cipher definition fixes.
+      o Fix security issues CVE-2010-0740 and CVE-2010-0433.
+
+  Major changes between OpenSSL 0.9.8l and OpenSSL 0.9.8m [25 Feb 2010]:
+
+      o Cipher definition fixes.
+      o Workaround for slow RAND_poll() on some WIN32 versions.
+      o Remove MD2 from algorithm tables.
+      o SPKAC handling fixes.
+      o Support for RFC5746 TLS renegotiation extension.
+      o Compression memory leak fixed.
+      o Compression session resumption fixed.
+      o Ticket and SNI coexistence fixes.
+      o Many fixes to DTLS handling.
+
+  Major changes between OpenSSL 0.9.8k and OpenSSL 0.9.8l [5 Nov 2009]:
+
+      o Temporary work around for CVE-2009-3555: disable renegotiation.
+
+  Major changes between OpenSSL 0.9.8j and OpenSSL 0.9.8k [25 Mar 2009]:
+
+      o Fix various build issues.
+      o Fix security issues (CVE-2009-0590, CVE-2009-0591, CVE-2009-0789)
+
+  Major changes between OpenSSL 0.9.8i and OpenSSL 0.9.8j [7 Jan 2009]:
+
+      o Fix security issue (CVE-2008-5077)
+      o Merge FIPS 140-2 branch code.
+
+  Major changes between OpenSSL 0.9.8g and OpenSSL 0.9.8h [28 May 2008]:
+
+      o CryptoAPI ENGINE support.
+      o Various precautionary measures.
+      o Fix for bugs affecting certificate request creation.
+      o Support for local machine keyset attribute in PKCS#12 files.
+
+  Major changes between OpenSSL 0.9.8f and OpenSSL 0.9.8g [19 Oct 2007]:
+
+      o Backport of CMS functionality to 0.9.8.
+      o Fixes for bugs introduced with 0.9.8f.
+
+  Major changes between OpenSSL 0.9.8e and OpenSSL 0.9.8f [11 Oct 2007]:
+
+      o Add gcc 4.2 support.
+      o Add support for AES and SSE2 assembly language optimization
+        for VC++ build.
+      o Support for RFC4507bis and server name extensions if explicitly
+        selected at compile time.
+      o DTLS improvements.
+      o RFC4507bis support.
+      o TLS Extensions support.
+
+  Major changes between OpenSSL 0.9.8d and OpenSSL 0.9.8e [23 Feb 2007]:
+
+      o Various ciphersuite selection fixes.
+      o RFC3779 support.
+
+  Major changes between OpenSSL 0.9.8c and OpenSSL 0.9.8d [28 Sep 2006]:
+
+      o Introduce limits to prevent malicious key DoS  (CVE-2006-2940)
+      o Fix security issues (CVE-2006-2937, CVE-2006-3737, CVE-2006-4343)
+      o Changes to ciphersuite selection algorithm
+
+  Major changes between OpenSSL 0.9.8b and OpenSSL 0.9.8c [5 Sep 2006]:
+
+      o Fix Daniel Bleichenbacher forged signature attack, CVE-2006-4339
+      o New cipher Camellia
+
+  Major changes between OpenSSL 0.9.8a and OpenSSL 0.9.8b [4 May 2006]:
+
+      o Cipher string fixes.
+      o Fixes for VC++ 2005.
+      o Updated ECC cipher suite support.
+      o New functions EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free().
+      o Zlib compression usage fixes.
+      o Built in dynamic engine compilation support on Win32.
+      o Fixes auto dynamic engine loading in Win32.
+
+  Major changes between OpenSSL 0.9.8 and OpenSSL 0.9.8a [11 Oct 2005]:
+
+      o Fix potential SSL 2.0 rollback, CVE-2005-2969
+      o Extended Windows CE support
+
+  Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.8 [5 Jul 2005]:
+
+      o Major work on the BIGNUM library for higher efficiency and to
+        make operations more streamlined and less contradictory.  This
+        is the result of a major audit of the BIGNUM library.
+      o Addition of BIGNUM functions for fields GF(2^m) and NIST
+        curves, to support the Elliptic Crypto functions.
+      o Major work on Elliptic Crypto; ECDH and ECDSA added, including
+        the use through EVP, X509 and ENGINE.
+      o New ASN.1 mini-compiler that's usable through the OpenSSL
+        configuration file.
+      o Added support for ASN.1 indefinite length constructed encoding.
+      o New PKCS#12 'medium level' API to manipulate PKCS#12 files.
+      o Complete rework of shared library construction and linking
+        programs with shared or static libraries, through a separate
+        Makefile.shared.
+      o Rework of the passing of parameters from one Makefile to another.
+      o Changed ENGINE framework to load dynamic engine modules
+        automatically from specifically given directories.
+      o New structure and ASN.1 functions for CertificatePair.
+      o Changed the ZLIB compression method to be stateful.
+      o Changed the key-generation and primality testing "progress"
+        mechanism to take a structure that contains the ticker
+        function and an argument.
+      o New engine module: GMP (performs private key exponentiation).
+      o New engine module: VIA PadLOck ACE extension in VIA C3
+        Nehemiah processors.
+      o Added support for IPv6 addresses in certificate extensions.
+        See RFC 1884, section 2.2.
+      o Added support for certificate policy mappings, policy
+        constraints and name constraints.
+      o Added support for multi-valued AVAs in the OpenSSL
+        configuration file.
+      o Added support for multiple certificates with the same subject
+        in the 'openssl ca' index file.
+      o Make it possible to create self-signed certificates using
+        'openssl ca -selfsign'.
+      o Make it possible to generate a serial number file with
+        'openssl ca -create_serial'.
+      o New binary search functions with extended functionality.
+      o New BUF functions.
+      o New STORE structure and library to provide an interface to all
+        sorts of data repositories.  Supports storage of public and
+        private keys, certificates, CRLs, numbers and arbitrary blobs.
+        This library is unfortunately unfinished and unused within
+        OpenSSL.
+      o New control functions for the error stack.
+      o Changed the PKCS#7 library to support one-pass S/MIME
+        processing.
+      o Added the possibility to compile without old deprecated
+        functionality with the OPENSSL_NO_DEPRECATED macro or the
+        'no-deprecated' argument to the config and Configure scripts.
+      o Constification of all ASN.1 conversion functions, and other
+        affected functions.
+      o Improved platform support for PowerPC.
+      o New FIPS 180-2 algorithms (SHA-224, -256, -384 and -512).
+      o New X509_VERIFY_PARAM structure to support parameterisation
+        of X.509 path validation.
+      o Major overhaul of RC4 performance on Intel P4, IA-64 and
+        AMD64.
+      o Changed the Configure script to have some algorithms disabled
+        by default.  Those can be explicitly enabled with the new
+        argument form 'enable-xxx'.
+      o Change the default digest in 'openssl' commands from MD5 to
+        SHA-1.
+      o Added support for DTLS.
+      o New BIGNUM blinding.
+      o Added support for the RSA-PSS encryption scheme
+      o Added support for the RSA X.931 padding.
+      o Added support for BSD sockets on NetWare.
+      o Added support for files larger than 2GB.
+      o Added initial support for Win64.
+      o Added alternate pkg-config files.
+
+  Major changes between OpenSSL 0.9.7l and OpenSSL 0.9.7m [23 Feb 2007]:
+
+      o FIPS 1.1.1 module linking.
+      o Various ciphersuite selection fixes.
+
+  Major changes between OpenSSL 0.9.7k and OpenSSL 0.9.7l [28 Sep 2006]:
+
+      o Introduce limits to prevent malicious key DoS  (CVE-2006-2940)
+      o Fix security issues (CVE-2006-2937, CVE-2006-3737, CVE-2006-4343)
+
+  Major changes between OpenSSL 0.9.7j and OpenSSL 0.9.7k [5 Sep 2006]:
+
+      o Fix Daniel Bleichenbacher forged signature attack, CVE-2006-4339
+
+  Major changes between OpenSSL 0.9.7i and OpenSSL 0.9.7j [4 May 2006]:
+
+      o Visual C++ 2005 fixes.
+      o Update Windows build system for FIPS.
+
+  Major changes between OpenSSL 0.9.7h and OpenSSL 0.9.7i [14 Oct 2005]:
+
+      o Give EVP_MAX_MD_SIZE its old value, except for a FIPS build.
+
+  Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.7h [11 Oct 2005]:
+
+      o Fix SSL 2.0 Rollback, CVE-2005-2969
+      o Allow use of fixed-length exponent on DSA signing
+      o Default fixed-window RSA, DSA, DH private-key operations
+
+  Major changes between OpenSSL 0.9.7f and OpenSSL 0.9.7g [11 Apr 2005]:
+
+      o More compilation issues fixed.
+      o Adaptation to more modern Kerberos API.
+      o Enhanced or corrected configuration for Solaris64, Mingw and Cygwin.
+      o Enhanced x86_64 assembler BIGNUM module.
+      o More constification.
+      o Added processing of proxy certificates (RFC 3820).
+
+  Major changes between OpenSSL 0.9.7e and OpenSSL 0.9.7f [22 Mar 2005]:
+
+      o Several compilation issues fixed.
+      o Many memory allocation failure checks added.
+      o Improved comparison of X509 Name type.
+      o Mandatory basic checks on certificates.
+      o Performance improvements.
+
+  Major changes between OpenSSL 0.9.7d and OpenSSL 0.9.7e [25 Oct 2004]:
+
+      o Fix race condition in CRL checking code.
+      o Fixes to PKCS#7 (S/MIME) code.
+
+  Major changes between OpenSSL 0.9.7c and OpenSSL 0.9.7d [17 Mar 2004]:
+
+      o Security: Fix Kerberos ciphersuite SSL/TLS handshaking bug
+      o Security: Fix null-pointer assignment in do_change_cipher_spec()
+      o Allow multiple active certificates with same subject in CA index
+      o Multiple X509 verification fixes
+      o Speed up HMAC and other operations
+
+  Major changes between OpenSSL 0.9.7b and OpenSSL 0.9.7c [30 Sep 2003]:
+
+      o Security: fix various ASN1 parsing bugs.
+      o New -ignore_err option to OCSP utility.
+      o Various interop and bug fixes in S/MIME code.
+      o SSL/TLS protocol fix for unrequested client certificates.
+
+  Major changes between OpenSSL 0.9.7a and OpenSSL 0.9.7b [10 Apr 2003]:
+
+      o Security: counter the Klima-Pokorny-Rosa extension of
+        Bleichbacher's attack
+      o Security: make RSA blinding default.
+      o Configuration: Irix fixes, AIX fixes, better mingw support.
+      o Support for new platforms: linux-ia64-ecc.
+      o Build: shared library support fixes.
+      o ASN.1: treat domainComponent correctly.
+      o Documentation: fixes and additions.
+
+  Major changes between OpenSSL 0.9.7 and OpenSSL 0.9.7a [19 Feb 2003]:
+
+      o Security: Important security related bugfixes.
+      o Enhanced compatibility with MIT Kerberos.
+      o Can be built without the ENGINE framework.
+      o IA32 assembler enhancements.
+      o Support for new platforms: FreeBSD/IA64 and FreeBSD/Sparc64.
+      o Configuration: the no-err option now works properly.
+      o SSL/TLS: now handles manual certificate chain building.
+      o SSL/TLS: certain session ID malfunctions corrected.
+
+  Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.7 [30 Dec 2002]:
+
+      o New library section OCSP.
+      o Complete rewrite of ASN1 code.
+      o CRL checking in verify code and openssl utility.
+      o Extension copying in 'ca' utility.
+      o Flexible display options in 'ca' utility.
+      o Provisional support for international characters with UTF8.
+      o Support for external crypto devices ('engine') is no longer
+        a separate distribution.
+      o New elliptic curve library section.
+      o New AES (Rijndael) library section.
+      o Support for new platforms: Windows CE, Tandem OSS, A/UX, AIX 64-bit,
+        Linux x86_64, Linux 64-bit on Sparc v9
+      o Extended support for some platforms: VxWorks
+      o Enhanced support for shared libraries.
+      o Now only builds PIC code when shared library support is requested.
+      o Support for pkg-config.
+      o Lots of new manuals.
+      o Makes symbolic links to or copies of manuals to cover all described
+        functions.
+      o Change DES API to clean up the namespace (some applications link also
+        against libdes providing similar functions having the same name).
+        Provide macros for backward compatibility (will be removed in the
+        future).
+      o Unify handling of cryptographic algorithms (software and engine)
+        to be available via EVP routines for asymmetric and symmetric ciphers.
+      o NCONF: new configuration handling routines.
+      o Change API to use more 'const' modifiers to improve error checking
+        and help optimizers.
+      o Finally remove references to RSAref.
+      o Reworked parts of the BIGNUM code.
+      o Support for new engines: Broadcom ubsec, Accelerated Encryption
+        Processing, IBM 4758.
+      o A few new engines added in the demos area.
+      o Extended and corrected OID (object identifier) table.
+      o PRNG: query at more locations for a random device, automatic query for
+        EGD style random sources at several locations.
+      o SSL/TLS: allow optional cipher choice according to server's preference.
+      o SSL/TLS: allow server to explicitly set new session ids.
+      o SSL/TLS: support Kerberos cipher suites (RFC2712).
+        Only supports MIT Kerberos for now.
+      o SSL/TLS: allow more precise control of renegotiations and sessions.
+      o SSL/TLS: add callback to retrieve SSL/TLS messages.
+      o SSL/TLS: support AES cipher suites (RFC3268).
+
+  Major changes between OpenSSL 0.9.6j and OpenSSL 0.9.6k [30 Sep 2003]:
+
+      o Security: fix various ASN1 parsing bugs.
+      o SSL/TLS protocol fix for unrequested client certificates.
+
+  Major changes between OpenSSL 0.9.6i and OpenSSL 0.9.6j [10 Apr 2003]:
+
+      o Security: counter the Klima-Pokorny-Rosa extension of
+        Bleichbacher's attack
+      o Security: make RSA blinding default.
+      o Build: shared library support fixes.
+
+  Major changes between OpenSSL 0.9.6h and OpenSSL 0.9.6i [19 Feb 2003]:
+
+      o Important security related bugfixes.
+
+  Major changes between OpenSSL 0.9.6g and OpenSSL 0.9.6h [5 Dec 2002]:
+
+      o New configuration targets for Tandem OSS and A/UX.
+      o New OIDs for Microsoft attributes.
+      o Better handling of SSL session caching.
+      o Better comparison of distinguished names.
+      o Better handling of shared libraries in a mixed GNU/non-GNU environment.
+      o Support assembler code with Borland C.
+      o Fixes for length problems.
+      o Fixes for uninitialised variables.
+      o Fixes for memory leaks, some unusual crashes and some race conditions.
+      o Fixes for smaller building problems.
+      o Updates of manuals, FAQ and other instructive documents.
+
+  Major changes between OpenSSL 0.9.6f and OpenSSL 0.9.6g [9 Aug 2002]:
+
+      o Important building fixes on Unix.
+
+  Major changes between OpenSSL 0.9.6e and OpenSSL 0.9.6f [8 Aug 2002]:
+
+      o Various important bugfixes.
+
+  Major changes between OpenSSL 0.9.6d and OpenSSL 0.9.6e [30 Jul 2002]:
+
+      o Important security related bugfixes.
+      o Various SSL/TLS library bugfixes.
+
+  Major changes between OpenSSL 0.9.6c and OpenSSL 0.9.6d [9 May 2002]:
+
+      o Various SSL/TLS library bugfixes.
+      o Fix DH parameter generation for 'non-standard' generators.
+
+  Major changes between OpenSSL 0.9.6b and OpenSSL 0.9.6c [21 Dec 2001]:
+
+      o Various SSL/TLS library bugfixes.
+      o BIGNUM library fixes.
+      o RSA OAEP and random number generation fixes.
+      o Object identifiers corrected and added.
+      o Add assembler BN routines for IA64.
+      o Add support for OS/390 Unix, UnixWare with gcc, OpenUNIX 8,
+        MIPS Linux; shared library support for Irix, HP-UX.
+      o Add crypto accelerator support for AEP, Baltimore SureWare,
+        Broadcom and Cryptographic Appliance's keyserver
+        [in 0.9.6c-engine release].
+
+  Major changes between OpenSSL 0.9.6a and OpenSSL 0.9.6b [9 Jul 2001]:
+
+      o Security fix: PRNG improvements.
+      o Security fix: RSA OAEP check.
+      o Security fix: Reinsert and fix countermeasure to Bleichbacher's
+        attack.
+      o MIPS bug fix in BIGNUM.
+      o Bug fix in "openssl enc".
+      o Bug fix in X.509 printing routine.
+      o Bug fix in DSA verification routine and DSA S/MIME verification.
+      o Bug fix to make PRNG thread-safe.
+      o Bug fix in RAND_file_name().
+      o Bug fix in compatibility mode trust settings.
+      o Bug fix in blowfish EVP.
+      o Increase default size for BIO buffering filter.
+      o Compatibility fixes in some scripts.
+
+  Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.6a [5 Apr 2001]:
+
+      o Security fix: change behavior of OpenSSL to avoid using
+        environment variables when running as root.
+      o Security fix: check the result of RSA-CRT to reduce the
+        possibility of deducing the private key from an incorrectly
+        calculated signature.
+      o Security fix: prevent Bleichenbacher's DSA attack.
+      o Security fix: Zero the premaster secret after deriving the
+        master secret in DH ciphersuites.
+      o Reimplement SSL_peek(), which had various problems.
+      o Compatibility fix: the function des_encrypt() renamed to
+        des_encrypt1() to avoid clashes with some Unixen libc.
+      o Bug fixes for Win32, HP/UX and Irix.
+      o Bug fixes in BIGNUM, SSL, PKCS#7, PKCS#12, X.509, CONF and
+        memory checking routines.
+      o Bug fixes for RSA operations in threaded environments.
+      o Bug fixes in misc. openssl applications.
+      o Remove a few potential memory leaks.
+      o Add tighter checks of BIGNUM routines.
+      o Shared library support has been reworked for generality.
+      o More documentation.
+      o New function BN_rand_range().
+      o Add "-rand" option to openssl s_client and s_server.
+
+  Major changes between OpenSSL 0.9.5a and OpenSSL 0.9.6 [10 Oct 2000]:
+
+      o Some documentation for BIO and SSL libraries.
+      o Enhanced chain verification using key identifiers.
+      o New sign and verify options to 'dgst' application.
+      o Support for DER and PEM encoded messages in 'smime' application.
+      o New 'rsautl' application, low level RSA utility.
+      o MD4 now included.
+      o Bugfix for SSL rollback padding check.
+      o Support for external crypto devices [1].
+      o Enhanced EVP interface.
+
+    [1] The support for external crypto devices is currently a separate
+        distribution.  See the file README.ENGINE.
+
+  Major changes between OpenSSL 0.9.5 and OpenSSL 0.9.5a [1 Apr 2000]:
+
+      o Bug fixes for Win32, SuSE Linux, NeXTSTEP and FreeBSD 2.2.8
+      o Shared library support for HPUX and Solaris-gcc
+      o Support of Linux/IA64
+      o Assembler support for Mingw32
+      o New 'rand' application
+      o New way to check for existence of algorithms from scripts
+
+  Major changes between OpenSSL 0.9.4 and OpenSSL 0.9.5 [25 May 2000]:
+
+      o S/MIME support in new 'smime' command
+      o Documentation for the OpenSSL command line application
+      o Automation of 'req' application
+      o Fixes to make s_client, s_server work under Windows
+      o Support for multiple fieldnames in SPKACs
+      o New SPKAC command line utility and associated library functions
+      o Options to allow passwords to be obtained from various sources
+      o New public key PEM format and options to handle it
+      o Many other fixes and enhancements to command line utilities
+      o Usable certificate chain verification
+      o Certificate purpose checking
+      o Certificate trust settings
+      o Support of authority information access extension
+      o Extensions in certificate requests
+      o Simplified X509 name and attribute routines
+      o Initial (incomplete) support for international character sets
+      o New DH_METHOD, DSA_METHOD and enhanced RSA_METHOD
+      o Read only memory BIOs and simplified creation function
+      o TLS/SSL protocol bugfixes: Accept TLS 'client hello' in SSL 3.0
+        record; allow fragmentation and interleaving of handshake and other
+        data
+      o TLS/SSL code now "tolerates" MS SGC
+      o Work around for Netscape client certificate hang bug
+      o RSA_NULL option that removes RSA patent code but keeps other
+        RSA functionality
+      o Memory leak detection now allows applications to add extra information
+        via a per-thread stack
+      o PRNG robustness improved
+      o EGD support
+      o BIGNUM library bug fixes
+      o Faster DSA parameter generation
+      o Enhanced support for Alpha Linux
+      o Experimental MacOS support
+
+  Major changes between OpenSSL 0.9.3 and OpenSSL 0.9.4 [9 Aug 1999]:
+
+      o Transparent support for PKCS#8 format private keys: these are used
+        by several software packages and are more secure than the standard
+        form
+      o PKCS#5 v2.0 implementation
+      o Password callbacks have a new void * argument for application data
+      o Avoid various memory leaks
+      o New pipe-like BIO that allows using the SSL library when actual I/O
+        must be handled by the application (BIO pair)
+
+  Major changes between OpenSSL 0.9.2b and OpenSSL 0.9.3 [24 May 1999]:
+      o Lots of enhancements and cleanups to the Configuration mechanism
+      o RSA OEAP related fixes
+      o Added `openssl ca -revoke' option for revoking a certificate
+      o Source cleanups: const correctness, type-safe stacks and ASN.1 SETs
+      o Source tree cleanups: removed lots of obsolete files
+      o Thawte SXNet, certificate policies and CRL distribution points
+        extension support
+      o Preliminary (experimental) S/MIME support
+      o Support for ASN.1 UTF8String and VisibleString
+      o Full integration of PKCS#12 code
+      o Sparc assembler bignum implementation, optimized hash functions
+      o Option to disable selected ciphers
+
+  Major changes between OpenSSL 0.9.1c and OpenSSL 0.9.2b [22 Mar 1999]:
+      o Fixed a security hole related to session resumption
+      o Fixed RSA encryption routines for the p < q case
+      o "ALL" in cipher lists now means "everything except NULL ciphers"
+      o Support for Triple-DES CBCM cipher
+      o Support of Optimal Asymmetric Encryption Padding (OAEP) for RSA
+      o First support for new TLSv1 ciphers
+      o Added a few new BIOs (syslog BIO, reliable BIO)
+      o Extended support for DSA certificate/keys.
+      o Extended support for Certificate Signing Requests (CSR)
+      o Initial support for X.509v3 extensions
+      o Extended support for compression inside the SSL record layer
+      o Overhauled Win32 builds
+      o Cleanups and fixes to the Big Number (BN) library
+      o Support for ASN.1 GeneralizedTime
+      o Splitted ASN.1 SETs from SEQUENCEs
+      o ASN1 and PEM support for Netscape Certificate Sequences
+      o Overhauled Perl interface
+      o Lots of source tree cleanups.
+      o Lots of memory leak fixes.
+      o Lots of bug fixes.
+
+  Major changes between SSLeay 0.9.0b and OpenSSL 0.9.1c [23 Dec 1998]:
+      o Integration of the popular NO_RSA/NO_DSA patches
+      o Initial support for compression inside the SSL record layer
+      o Added BIO proxy and filtering functionality
+      o Extended Big Number (BN) library
+      o Added RIPE MD160 message digest
+      o Added support for RC2/64bit cipher
+      o Extended ASN.1 parser routines
+      o Adjustments of the source tree for CVS
+      o Support for various new platforms