Late Monthly Status Report (November 2019)

[Richard Levitte]

Apart from normal business, such as normal reviews, OMC business,
normal system administration tasks, small fixes, etc., key activities
this month:

* Meetings, workshops, etc

  - Worked through a significant amount of older issues together with
    Matt Caswell, primarly to triage them, but in some cases to also
    review them.  We will continued with the seriously aged issues in
    2020.

* Development

  - BIO_s_connect: add an error state and use it
    (PR openssl/openssl#7630)
  - Configure: Make --strict-warnings meaningful with MSVC cl
    (PR openssl/openssl#10287)
  - VMS: Added new method to gather entropy on VMS, based on SYS$GET_ENTROPY.
    (PR openssl/openssl#8926)
  - Fix OSSL_PARAM_set_BN() to fill the given buffer correctly.
    (PR openssl/openssl#10326)
  - Make EVP_PKEY_CTX initialization more precise
    (PR openssl/openssl#10308)
  - OSSL_STORE: constify the criterion parameter a bit more
    (PR openssl/openssl#8442)
  - X509_LOOKUP_store: new X509_LOOKUP_METHOD that works by OSSL_STORE URI
    (PR openssl/openssl#8442)
  - EVP: Make the KEYEXCH implementation leaner
    (PR openssl/openssl#10305)
  - EVP: Make the SIGNATURE implementation leaner
    (PR openssl/openssl#10303)
  - Rework ordinals
    (PR openssl/openssl#10348)
  - Change the logic and behaviour surrounding '--api' and 'no-deprecated'
    (PR openssl/openssl#10364)
  - Add EVP functionality to create domain params and keys by user data
    (PR openssl/openssl#10187)
  - Refactor PEM_read_bio_{PrivateKey,Parameters,DHparams}
    (PR openssl/openssl#2746)
  - Cleanup include/openssl/opensslv.h.in
    (PR openssl/openssl#10218)
  - Configuration: make Solaris builds with gcc recognise GNU ld
    (PR openssl/openssl#8548)
  - Final cleanup after move to leaner EVP_PKEY methods
    (PR openssl/openssl#10309)
  - Reinstate the KDF error macros
    (PR openssl/openssl#10368)
  - Add a .pragma directive for configuration files
    (PR openssl/openssl#8882)
  - [master] SSL: Document SSL_add_{file,dir,store}_cert_subjects_to_stack()
    (PR openssl/openssl#10402)
  - [1.1.1] SSL: Document SSL_add_{file,dir}_cert_subjects_to_stack()
    (PR openssl/openssl#10403)
  - CORE: Add a generic callback function type
    (PR openssl/openssl#10412)
  - CORE & PROV: make export of key data leaner through callback
    (PR openssl/openssl#10414)
  - PEM: constify PEM_write_ routines
    (PR openssl/openssl#10452)
  - Replumbing: pre-populate the EVP namemap with commonly known names
    (PR openssl/openssl#8984)
  - UI_UTIL_wrap_read_pem_callback(): when |cb| is NULL, use PEM_def_callback
    (PR openssl/openssl#10447)
  - doc/man7/proxy-certificates.pod: New guide for proxy certificates
    (PR openssl/openssl#10507)
  - configdata.pm.in, util/dofile.pl: load 'platform' unconditionally
    (PR openssl/openssl#10514)
  - Generate docs at build time instead of install time
    (PR openssl/openssl#6236)
  - SERIALIZER: New API for serialization of objects through providers
    (PR openssl/openssl#10394)
  - [1.1.1 only] i2b_PVK(): Use Encrypt, not Decrypt
    (PR openssl/openssl#10521)
  - [not yet merged] Implement domparam and key generation
    (PR openssl/openssl#10289)
  - [not yet merged] apps: Switch to using OSSL_STORE for loading
    keys, certs, ...
    (PR openssl/openssl#7390)
  - [unpublished] Support serializers in 'openssl provider' and
    'openssl list'

-- 
Richard Levitte         levitte at openssl.org
OpenSSL Project         http://www.openssl.org/~levitte/