Late Monthly Status Report (November 2019)

Richard Levitte levitte at
Sat Dec 28 11:07:25 UTC 2019

Apart from normal business, such as normal reviews, OMC business,
normal system administration tasks, small fixes, etc., key activities
this month:

* Meetings, workshops, etc

  - Worked through a significant amount of older issues together with
    Matt Caswell, primarly to triage them, but in some cases to also
    review them.  We will continued with the seriously aged issues in

* Development

  - BIO_s_connect: add an error state and use it
    (PR openssl/openssl#7630)
  - Configure: Make --strict-warnings meaningful with MSVC cl
    (PR openssl/openssl#10287)
  - VMS: Added new method to gather entropy on VMS, based on SYS$GET_ENTROPY.
    (PR openssl/openssl#8926)
  - Fix OSSL_PARAM_set_BN() to fill the given buffer correctly.
    (PR openssl/openssl#10326)
  - Make EVP_PKEY_CTX initialization more precise
    (PR openssl/openssl#10308)
  - OSSL_STORE: constify the criterion parameter a bit more
    (PR openssl/openssl#8442)
  - X509_LOOKUP_store: new X509_LOOKUP_METHOD that works by OSSL_STORE URI
    (PR openssl/openssl#8442)
  - EVP: Make the KEYEXCH implementation leaner
    (PR openssl/openssl#10305)
  - EVP: Make the SIGNATURE implementation leaner
    (PR openssl/openssl#10303)
  - Rework ordinals
    (PR openssl/openssl#10348)
  - Change the logic and behaviour surrounding '--api' and 'no-deprecated'
    (PR openssl/openssl#10364)
  - Add EVP functionality to create domain params and keys by user data
    (PR openssl/openssl#10187)
  - Refactor PEM_read_bio_{PrivateKey,Parameters,DHparams}
    (PR openssl/openssl#2746)
  - Cleanup include/openssl/
    (PR openssl/openssl#10218)
  - Configuration: make Solaris builds with gcc recognise GNU ld
    (PR openssl/openssl#8548)
  - Final cleanup after move to leaner EVP_PKEY methods
    (PR openssl/openssl#10309)
  - Reinstate the KDF error macros
    (PR openssl/openssl#10368)
  - Add a .pragma directive for configuration files
    (PR openssl/openssl#8882)
  - [master] SSL: Document SSL_add_{file,dir,store}_cert_subjects_to_stack()
    (PR openssl/openssl#10402)
  - [1.1.1] SSL: Document SSL_add_{file,dir}_cert_subjects_to_stack()
    (PR openssl/openssl#10403)
  - CORE: Add a generic callback function type
    (PR openssl/openssl#10412)
  - CORE & PROV: make export of key data leaner through callback
    (PR openssl/openssl#10414)
  - PEM: constify PEM_write_ routines
    (PR openssl/openssl#10452)
  - Replumbing: pre-populate the EVP namemap with commonly known names
    (PR openssl/openssl#8984)
  - UI_UTIL_wrap_read_pem_callback(): when |cb| is NULL, use PEM_def_callback
    (PR openssl/openssl#10447)
  - doc/man7/proxy-certificates.pod: New guide for proxy certificates
    (PR openssl/openssl#10507)
  -, util/ load 'platform' unconditionally
    (PR openssl/openssl#10514)
  - Generate docs at build time instead of install time
    (PR openssl/openssl#6236)
  - SERIALIZER: New API for serialization of objects through providers
    (PR openssl/openssl#10394)
  - [1.1.1 only] i2b_PVK(): Use Encrypt, not Decrypt
    (PR openssl/openssl#10521)
  - [not yet merged] Implement domparam and key generation
    (PR openssl/openssl#10289)
  - [not yet merged] apps: Switch to using OSSL_STORE for loading
    keys, certs, ...
    (PR openssl/openssl#7390)
  - [unpublished] Support serializers in 'openssl provider' and
    'openssl list'

Richard Levitte         levitte at
OpenSSL Project

More information about the openssl-project mailing list