changelog.0_9_7-stable_not-in-head_fips

mediastreamer2是开源的网络传输媒体流的库

		fips/rsa/fingerprint.sha1 (1.1.4.6), "Exp", lines: +1 -1
		fips/rsa/fips_rsa_selftest.c (1.1.4.4), "Exp", lines: +2 -2

	Clear signed vs. unsigned conflicts.  Change the fingerprint
	accordingly.

2005-01-11 19:25  levitte

	Changed:
		ssl/ssltest.c (1.53.2.24), "Exp", lines: +2 -2
		fips/rand/fips_randtest.c (1.1.2.6), "Exp", lines: +3 -3
		fips/sha1/fips_sha1test.c (1.1.2.5), "Exp", lines: +10 -4
		fips/des/fips_desmovs.c (1.1.2.6), "Exp", lines: +8 -7
		fips/dsa/fips_dsatest.c (1.1.2.5), "Exp", lines: +2 -2
		apps/openssl.c (1.48.2.12), "Exp", lines: +1 -1
		fips/aes/fips_aesavs.c (1.1.2.12), "Exp", lines: +8 -7

	Use EXIT() instead of exit().

2005-01-26 21:00  steve

	Changed:
		apps/dgst.c (1.23.2.13), "Exp", lines: +10 -0
		apps/pkcs12.c (1.60.2.13), "Exp", lines: +8 -1
		crypto/crypto.h (1.62.2.9), "Exp", lines: +49 -0
		crypto/md32_common.h (1.22.2.9), "Exp", lines: +1 -1
		crypto/bf/bf_skey.c (1.6.2.1), "Exp", lines: +2 -1
		crypto/bf/blowfish.h (1.9.2.1), "Exp", lines: +4 -1
		crypto/cast/c_skey.c (1.5.6.1), "Exp", lines: +3 -1
		crypto/cast/cast.h (1.7.2.1), "Exp", lines: +4 -1
		crypto/evp/bio_md.c (1.11.2.3), "Exp", lines: +2 -7
		crypto/evp/digest.c (1.21.2.7), "Exp", lines: +11 -0
		crypto/evp/e_aes.c (1.6.2.11), "Exp", lines: +11 -11
		crypto/evp/e_des.c (1.5.2.9), "Exp", lines: +5 -3
		crypto/evp/e_des3.c (1.8.2.8), "Exp", lines: +6 -6
		crypto/evp/evp.h (1.86.2.16), "Exp", lines: +17 -0
		crypto/evp/evp_enc.c (1.28.2.11), "Exp", lines: +15 -1
		crypto/evp/evp_err.c (1.23.2.4), "Exp", lines: +6 -1
		crypto/evp/evp_locl.h (1.7.2.7), "Exp", lines: +17 -2
		crypto/evp/m_dss.c (1.8.2.1), "Exp", lines: +1 -1
		crypto/evp/m_md2.c (1.9.2.1), "Exp", lines: +1 -0
		crypto/evp/m_md4.c (1.8.2.1), "Exp", lines: +1 -0
		crypto/evp/m_md5.c (1.9.2.1), "Exp", lines: +1 -0
		crypto/evp/m_mdc2.c (1.9.2.1), "Exp", lines: +1 -0
		crypto/evp/m_sha.c (1.8.2.2), "Exp", lines: +1 -0
		crypto/evp/m_sha1.c (1.8.2.1), "Exp", lines: +1 -1
		crypto/evp/names.c (1.7.2.1), "Exp", lines: +3 -0
		crypto/hmac/hmac.c (1.12.2.3), "Exp", lines: +7 -0
		crypto/hmac/hmac.h (1.14.2.2), "Exp", lines: +1 -0
		crypto/idea/i_skey.c (1.5.6.1), "Exp", lines: +13 -0
		crypto/idea/idea.h (1.10.2.1), "Exp", lines: +4 -0
		crypto/md2/md2.h (1.11.2.1), "Exp", lines: +3 -0
		crypto/md2/md2_dgst.c (1.13.2.4), "Exp", lines: +3 -1
		crypto/md4/md4.h (1.3.2.1), "Exp", lines: +3 -0
		crypto/md4/md4_dgst.c (1.2.2.2), "Exp", lines: +1 -1
		crypto/md5/md5.h (1.10.2.3), "Exp", lines: +3 -0
		crypto/md5/md5_dgst.c (1.16.2.2), "Exp", lines: +1 -1
		crypto/mdc2/mdc2.h (1.9.2.1), "Exp", lines: +3 -1
		crypto/mdc2/mdc2dgst.c (1.13.2.1), "Exp", lines: +3 -1
		crypto/rc2/rc2.h (1.10.2.1), "Exp", lines: +4 -1
		crypto/rc2/rc2_skey.c (1.4.6.1), "Exp", lines: +13 -0
		crypto/rc4/rc4.h (1.10.2.2), "Exp", lines: +3 -0
		crypto/rc4/rc4_skey.c (1.10.8.2), "Exp", lines: +2 -1
		crypto/rc5/rc5.h (1.5.2.1), "Exp", lines: +4 -1
		crypto/rc5/rc5_skey.c (1.4.6.1), "Exp", lines: +14 -0
		crypto/ripemd/ripemd.h (1.8.2.1), "Exp", lines: +3 -0
		crypto/ripemd/rmd_dgst.c (1.13.2.2), "Exp", lines: +2 -1
		crypto/sha/sha.h (1.11.2.2), "Exp", lines: +3 -0
		crypto/sha/sha_locl.h (1.16.2.3), "Exp", lines: +4 -0
		crypto/x509/x509_cmp.c (1.22.2.4), "Exp", lines: +7 -1
		crypto/x509/x509_vfy.c (1.56.2.13), "Exp", lines: +1 -1
		ssl/s3_clnt.c (1.53.2.18), "Exp", lines: +2 -0
		ssl/s3_enc.c (1.31.2.9), "Exp", lines: +3 -0
		ssl/s3_srvr.c (1.85.2.23), "Exp", lines: +2 -0
		ssl/t1_enc.c (1.27.2.9), "Exp", lines: +2 -0

	FIPS algorithm blocking.

		Non FIPS algorithms are not normally allowed in FIPS mode.

		Any attempt to use them via high level functions will
	return an error.

		The low level non-FIPS algorithm functions cannot return
	errors so they produce assertion failures. HMAC also has to give an
	assertion error because it (erroneously) can't return an error
	either.

		There are exceptions (such as MD5 in TLS and non
	cryptographic use of algorithms) and applications can override the
	blocking and use non FIPS algorithms anyway.

		For low level functions the override is perfomed by
	prefixing the algorithm initalization function with "private_" for
	example private_MD5_Init().

		For high level functions an override is performed by
	setting a flag in the context.

2005-01-27 02:49  steve

	Changed:
		apps/dgst.c (1.23.2.14), "Exp", lines: +9 -5
		crypto/crypto.h (1.62.2.10), "Exp", lines: +3 -0
		crypto/evp/digest.c (1.21.2.8), "Exp", lines: +34 -0
		crypto/hmac/hmac.c (1.12.2.4), "Exp", lines: +9 -0

	More FIPS algorithm blocking.

		Catch attempted use of non FIPS algorithms with HMAC.

		Give an assertion error for applications that ignore FIPS
	digest errors.

		Make -non-fips-allow work with dgst and HMAC.

2005-01-28 15:03  steve

	Changed:
		apps/dgst.c (1.23.2.15), "Exp", lines: +2 -1
		apps/enc.c (1.35.2.13), "Exp", lines: +38 -4
		crypto/evp/e_rc4.c (1.11.2.2), "Exp", lines: +1 -0
		crypto/evp/evp.h (1.86.2.17), "Exp", lines: +3 -0
		crypto/evp/evp_enc.c (1.28.2.12), "Exp", lines: +60 -15
		crypto/evp/evp_locl.h (1.7.2.8), "Exp", lines: +1 -0
		test/testenc (1.3.8.2), "Exp", lines: +8 -8

	Further FIPS algorithm blocking.

		Fixes to cipher blocking and enabling code.

		Add option -non-fips-allow to 'enc' and update testenc.

2005-01-31 02:33  steve

	Changed:
		ssl/s23_clnt.c (1.20.2.7), "Exp", lines: +16 -0
		ssl/s23_srvr.c (1.41.2.6), "Exp", lines: +9 -0
		ssl/s3_clnt.c (1.53.2.19), "Exp", lines: +0 -8
		ssl/s3_enc.c (1.31.2.10), "Exp", lines: +1 -0
		ssl/s3_srvr.c (1.85.2.24), "Exp", lines: +0 -8
		ssl/ssl.h (1.126.2.21), "Exp", lines: +1 -0
		ssl/ssl_cert.c (1.48.2.10), "Exp", lines: +0 -8
		ssl/ssl_err.c (1.41.2.4), "Exp", lines: +2 -1
		ssl/ssl_lib.c (1.110.2.13), "Exp", lines: +8 -9
		ssl/t1_enc.c (1.27.2.10), "Exp", lines: +0 -18

	Only allow TLS is FIPS mode.

		Remove old FIPS_allow_md5() calls.

2005-02-05 19:24  steve

	Changed:
		apps/req.c (1.88.2.18), "Exp", lines: +8 -1
		apps/x509.c (1.67.2.20), "Exp", lines: +8 -1

	In FIPS mode use SHA1 as default digest in x509 and req utilities.

2005-03-15 10:46  appro

	Changed:
		Makefile.org (1.154.2.96), "Exp", lines: +1 -1
		crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3
		fips/Makefile (1.1.4.8), "Exp", lines: +4 -1

	Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this
	in crypto/Makefile and make Makefile.org and fips/Makefile more
	discreet.

2005-03-22 18:29  steve

	Changed:
		fips/fingerprint.sha1 (1.1.2.12), "Exp", lines: +1 -1
		fips/fips.c (1.1.2.10), "Exp", lines: +1 -0

	Fix memory leak.

2005-03-27 05:36  steve

	Changed:
		crypto/evp/e_null.c (1.9.2.1), "Exp", lines: +1 -1
		ssl/s3_lib.c (1.57.2.13), "Exp", lines: +3 -3

	Allow 'null' cipher and appropriate Kerberos ciphersuites in FIPS
	mode.

2005-04-14 14:44  steve

	Changed:
		fips/fipshashes.sha1 (1.1.2.1), "Exp", lines: +29 -0
		util/checkhash.pl (1.1.2.1), "Exp", lines: +181 -0

	Perl script that checks or rebuilds FIPS hash files. This works on
	both Unix and Windows.

		Merge all FIPS hash files into a single hash file
	fips/fips.sha1

2005-04-15 05:27  steve

	Changed:
		fips/Makefile (1.1.4.9), "Exp", lines: +1 -1
		fips/aes/Makefile (1.1.4.4), "Exp", lines: +1 -4
		fips/des/Makefile (1.1.4.6), "Exp", lines: +1 -4
		fips/dh/Makefile (1.1.2.5), "Exp", lines: +1 -4
		fips/dsa/Makefile (1.1.4.4), "Exp", lines: +1 -4
		fips/rand/Makefile (1.1.4.3), "Exp", lines: +1 -4
		fips/rsa/Makefile (1.1.4.5), "Exp", lines: +1 -4
		fips/sha1/Makefile (1.1.4.9), "Exp", lines: +1 -7

	Update hash checking in makefiles to use new perl script.

2005-04-17 06:37  steve

	Changed:
		util/checkhash.pl (1.1.2.2), "Exp", lines: +163 -127

	Modify checkhash.pl so it can be run standalone or included as a
	funtion in another perl script.

2005-04-17 16:00  appro

	Changed:
		fips/sha1/Makefile (1.1.4.10), "Exp", lines: +9 -5

	Bring back fips_standalone_sha1.

2005-04-17 16:17  appro

	Deleted:
		fips/sha1/asm/sx86-elf.s (1.1.4.4)
	Changed:
		Configure (1.314.2.114), "Exp", lines: +1 -1
		fips/fipshashes.sha1 (1.1.2.2), "Exp", lines: +1 -1
		fips/sha1/Makefile (1.1.4.11), "Exp", lines: +1 -1
		fips/sha1/standalone.sha1 (1.1.2.13), "Exp", lines: +1 -1
		fips/sha1/asm/fips-sx86-elf.s (1.1.2.1), "Exp", lines: +1568 -0

	Rename fips/sha1/sx86-elf.s to fips/sha1/fips-sx86-elf.s.

2005-04-17 16:21  steve

	Changed:
		util/checkhash.pl (1.1.2.3), "Exp", lines: +2 -0

	Return 0 for successful hash check.

2005-04-17 16:54  appro

	Changed:
		Configure (1.314.2.116), "Exp", lines: +8 -1
		Makefile.org (1.154.2.99), "Exp", lines: +3 -2
		crypto/aes/aes_cbc.c (1.1.2.11), "Exp", lines: +2 -0
		fips/fipshashes.sha1 (1.1.2.4), "Exp", lines: +1 -0
		fips/aes/Makefile (1.1.4.5), "Exp", lines: +4 -2
		fips/aes/asm/fips-ax86-elf.s (1.1.2.1), "Exp", lines: +1822 -0

	Throw in fips/aes/asm/fips-ax86-elf.s.

2005-04-17 16:35  appro

	Changed:
		Configure (1.314.2.115), "Exp", lines: +1 -1
		fips/fipshashes.sha1 (1.1.2.3), "Exp", lines: +1 -1
		fips/des/asm/fips-dx86-elf.s (1.1.4.2), "Exp", lines: +108 -98

	Regenerate fips/des/asm/fips-dx86-elf.s with -fPIC flag.

2005-04-17 17:26  appro

	Changed:
		crypto/cryptlib.c (1.32.2.18), "Exp", lines: +6 -55
		crypto/crypto.h (1.62.2.11), "Exp", lines: +0 -3
		fips/fips.c (1.1.2.11), "Exp", lines: +62 -8
		fips/fips.h (1.1.2.7), "Exp", lines: +2 -3
		fips/fips_locl.h (1.1.4.3), "Exp", lines: +6 -3
		fips/fipshashes.sha1 (1.1.2.5), "Exp", lines: +4 -4
		fips/rand/fips_rand.c (1.1.2.10), "Exp", lines: +3 -1
		fips/rsa/fips_rsa_gen.c (1.1.4.4), "Exp", lines: +4 -2

	Resolve minor binary compatibility issues in fips.

2005-04-17 18:22  appro

	Changed:
		fips/fipshashes.sha1 (1.1.2.6), "Exp", lines: +12 -12
		fips/des/fips_des_locl.h (1.1.2.4), "Exp", lines: +1 -1
		fips/des/fips_set_key.c (1.1.4.4), "Exp", lines: +2 -2
		fips/dh/fips_dh_key.c (1.1.2.3), "Exp", lines: +1 -1
		fips/dsa/fips_dsa_ossl.c (1.1.2.7), "Exp", lines: +1 -1
		fips/dsa/fips_dsa_selftest.c (1.1.4.2), "Exp", lines: +3 -3
		fips/rand/fips_rand.c (1.1.2.11), "Exp", lines: +2 -2
		fips/rand/fips_rand.h (1.1.2.5), "Exp", lines: +1 -1
		fips/rsa/fips_rsa_eay.c (1.1.4.4), "Exp", lines: +1 -1
		fips/rsa/fips_rsa_gen.c (1.1.4.5), "Exp", lines: +1 -1
		fips/rsa/fips_rsa_selftest.c (1.1.4.5), "Exp", lines: +11 -11
		fips/sha1/fips_sha1_selftest.c (1.1.4.2), "Exp", lines: +1 -1
		fips/sha1/fips_sha1dgst.c (1.1.2.5), "Exp", lines: +1 -1
		fips/sha1/standalone.sha1 (1.1.2.14), "Exp", lines: +2 -2

	Minor fips const-ification.

2005-04-18 07:02  steve

	Changed:
		crypto/bf/bf_skey.c (1.6.2.2), "Exp", lines: +1 -0
		crypto/cast/c_skey.c (1.5.6.2), "Exp", lines: +1 -0
		crypto/idea/i_skey.c (1.5.6.2), "Exp", lines: +1 -0
		crypto/rc2/rc2_skey.c (1.4.6.2), "Exp", lines: +1 -0
		crypto/rc4/rc4_skey.c (1.10.8.3), "Exp", lines: +1 -0
		crypto/rc5/rc5_skey.c (1.4.6.2), "Exp", lines: +1 -0

	Pick up definition of FIPS_mode() in fips.h to avoid warnings.

2005-04-18 10:34  steve

	Deleted:
		fips/fingerprint.sha1 (1.1.2.14)
		fips/fips_check_sha1 (1.1.2.8)
		fips/fips_make_sha1 (1.1.2.7)
		fips/aes/fingerprint.sha1 (1.1.2.7)
		fips/des/fingerprint.sha1 (1.1.2.6)
		fips/dh/fingerprint.sha1 (1.1.2.4)
		fips/dsa/fingerprint.sha1 (1.1.2.7)
		fips/rand/fingerprint.sha1 (1.1.2.10)
		fips/rsa/fingerprint.sha1 (1.1.4.7)
		fips/sha1/fingerprint.sha1 (1.1.2.12)
	Changed:
		fips/sha1/Makefile (1.1.4.12), "Exp", lines: +1 -4

	Remove obsolete fingerprint.sha1 files and associated scripts.
	Delete test in fips/sha1/Makefile: the top level test checks the
	same files.

2005-04-19 09:11  appro

	Deleted:
		fips/fipshashes.sha1 (1.1.2.7)
		fips/sha1/standalone.sha1 (1.1.2.15)
	Changed:
		fips/fipshashes.c (1.1.2.1), "Exp", lines: +32 -0
		util/checkhash.pl (1.1.2.4), "Exp", lines: +7 -4

	Maintain fingerprint hashes as C source.

2005-04-19 09:17  appro

	Changed:
		util/checkhash.pl (1.1.2.5), "Exp", lines: +1 -1

	Complete the transition C-code hashes.

2005-04-21 19:06  steve

	Changed:
		apps/openssl.c (1.48.2.13), "Exp", lines: +0 -2
		fips/fips.c (1.1.2.12), "Exp", lines: +0 -27
		fips/fips.h (1.1.2.8), "Exp", lines: +0 -2
		fips/fipshashes.c (1.1.2.2), "Exp", lines: +2 -2

	Remove defunct FIPS_allow_md5() and related functions.

2005-04-22 06:15  appro

	Changed:
		fips/fips.c (1.1.2.13), "Exp", lines: +3 -3
		fips/fips_err.h (1.1.4.4), "Exp", lines: +3 -3
		fips/fipshashes.c (1.1.2.4), "Exp", lines: +2 -2

	Move some variables to .bss.