Late Monthly Status Report (May 2019)

Richard Levitte levitte at
Wed Aug 14 14:17:57 UTC 2019

Apart from normal business, such as normal reviews, OMC business,
normal system administration tasks, etc., key activities this month:

* Development

  - [not yet merged] Created a FIPS module checksum script and
    modified the Makefile rules to use it
    (PR openssl/openssl#8871)
  - [not yet merged] Started work to move all MAC implementations to
    the providers
    (PR openssl/openssl#8877)
  - Created internal dynamic id number<->name mapping API, to replace
    the legacy NID<->name database, and made the generic EVP fetching
    mechanism use it
    (PR openssl/openssl#8878)
  - [not yet merged] Added a .pragma directive for configuration files
    and added a pragma that allows '$' to be considered a symbol
    character unless followed by a brace.
    (PR openssl/openssl#8882)
  - [not yet merged] Modify the VMS entropy gathering unit to use the
    upcoming system servive SYS$GET_ENTROPY
    (PR openssl/openssl#8926)
  - [not yet merged] Added new X509_LOOKUP method that works with
    OSSL_STORE and a new command line options -CAstore that takes an
    (PR openssl/openssl#8442)
  - [not yet merged] Modified the internal dynamic id number<->name
    map to handle multiple names for the same id number
    (PR openssl/openssl#8967)
  - [not yet merged] Provided a couple of alternatives for populating
    the internal dynamic id number<->name map with aliases
    (PR openssl/openssl#8984 pre-populates the map with hard-coded
    aliases within the EVP sub-system)
    (PR openssl/openssl#8985 makes it possible for providers to
    provide aliases)
  - Attended the OMC f2f in Vancouver
  - Attended the ICMC conference in Vancouver
  - Clarified the requirements for X509_LOOKUP methods as to what side
    effects are expected when looking up diverse objects
    (PR openssl/openssl#8755)
  - Join the x509 and x509v3 directories
    (PR openssl/openssl#8925)
  - Constify OSSL_PROVIDER getter input parameters
    (PR openssl/openssl#9054)
  - Released OpenSSL 1.1.1c, 1.1.0k and 1.0.2s
  - Backport making make C++ build tests optional and configurable to
    (PRs openssl/openssl#8370 and openssl/openssl#9016)

* Internal

  - Recorded a number of committers that accepted their invitations
    while in Vancouver

* System administration

  - Worked on our Apache configs to remove some kinks

Richard Levitte         levitte at
OpenSSL Project

More information about the openssl-project mailing list