Monthly Status Report (March)

Matt Caswell matt at openssl.org
Wed Apr 7 14:33:19 UTC 2021


As well as normal reviews, responding to user queries, wiki user
requests, OMC business, support customer issues, CLA submissions,
handling security reports, etc., key activities this month:

- Provided support to a number of support customers
- Fixed an error in evp_extra_test
- Significant work on getting the 1.1.1 tests to run against master. 
Noted numerous issues as a result and report written about the results
- Completed and merged PR to cache legacy keys instead of downgrading them
- Fixed the check for suitable groups being available for TLSv1.3
- Added numerous missing entries in CHANGES.md
- Fixed a crash when using a "pkeyopt" without a ":"
- Performed the alpha13 release
- Addressed some TODO(3.0) comments in the code
- Updated the README-FIPS.md document with 3.0 information
- Fixed an issue where thread handlers were not being deregistered in 
the event that the provider init fails
- Co-ordinated the response to CVE-2021-3449 and provided numerous 
related code updates
- Added missing RUN_ONCE calls in rand_lib.c
- Did some investigation work for CVE-2021-3450
- Co-ordinated and performed the release of 1.1.1k
- Fixed an issue where too many symbols were copied into both libcrypto 
and legacy.so
- Wrote a libcrypto overview man page
- Took part in numerous planning meetings for 3.0
- Provided an improved implementation of X509_STORE_CTX_get1_issuer() 
(later superceded by work by Tomas)
- Fixed an inadvertent behaviour change of the ctrl 
EVP_PKEY_CTRL_RSA_KEYGEN_BITS


Matt



More information about the openssl-project mailing list