"Fossies" - the Fresh Open Source Software Archive

Member "SAOImageDS9/tls/ChangeLog" (13 Nov 2019, 17886 Bytes) of package /linux/misc/ds9.8.1.tar.gz:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file.

    1 2015-05-01  Andreas Kupries  <andreask@activestate.com>
    2 
    3 	* configure.in: Bump to version 1.6.5.
    4 	* win/makefile.vc:
    5 	* configure: regen with ac-2.59
    6 	* tls.c: Accepted SF TLS [bug/patch #57](https://sourceforge.net/p/tls/bugs/57/).
    7 	* tlsIO.c: Accepted core Tcl patch in [ticket](http://core.tcl.tk/tcl/tktview/0f94f855cafed92d0e174b7d835453a02831b4dd).
    8 
    9 2014-12-05  Andreas Kupries  <andreask@activestate.com>
   10 
   11 	* configure.in: Bump to version 1.6.4.
   12 	* win/makefile.vc:
   13 	* configure: regen with ac-2.59
   14 	* tls.c: Accepted SF TLS patches #12 and #13 implementing
   15 	* tls.htm: support for SNI, and TLS 1.1 + 1.2
   16 	* tlsInt.h:
   17 	* tlsIO.c: This also accepted patch for bug #53.
   18 	* tls.tcl: Patch available since June, now committed.
   19 
   20 2012-07-09  Andreas Kupries  <andreask@activestate.com>
   21 
   22 	* configure.in: Bump to version 1.6.3.
   23 	* win/makefile.vc:
   24 	* configure: regen with ac-2.59
   25 
   26 	* tls.c (MiscObjCmd): Fixed non-static string array used in call
   27 	  of Tcl_GetIndexFromObj(). Memory smash waiting to happen. Thanks
   28 	  to Brian Griffin for alerting us all to the problem. 
   29 
   30 2012-06-01  Andreas Kupries  <andreask@activestate.com>
   31 
   32 	* tls.c: Applied Jeff's patch from
   33 	  http://www.mail-archive.com/aolserver@listserv.aol.com/msg12356.html
   34 
   35 	* configure.in: Bump to version 1.6.2.
   36 	* win/makefile.vc:
   37 	* configure: regen with ac-2.59
   38 	
   39 2010-08-11  Jeff Hobbs  <jeffh@ActiveState.com>
   40 
   41 	*** TLS 1.6.1 TAGGED ***
   42 
   43 	* configure: regen with ac-2.59
   44 	* win/makefile.vc, configure.in: bump version to 1.6.1
   45 	* tclconfig/tcl.m4: updated to TEA 3.8
   46 
   47 	* tls.c (StatusObjCmd): memleak: free peer if loaded. [Bug 3041925]
   48 
   49 2010-07-27  Jeff Hobbs  <jeffh@ActiveState.com>
   50 
   51 	* tls.tcl (tls::socket): some socket implementations have a -type
   52 	support (e.g. for inet6).
   53 
   54 2009-04-23  Jeff Hobbs  <jeffh@ActiveState.com>
   55 
   56 	* tls.tcl (tls::initlib): add support for Windows starpack
   57 	operation that unbundles any constituent libraries. [AS Bug 82888]
   58 
   59 2008-06-18  Pat Thoyts  <patthoyts@users.sourceforge.net>
   60 
   61 	* tests/ciphers.test: Fix for different openssl versions.
   62 	* win/makefile.vc:    Updates to support tests.
   63 	* win/rules.vc:
   64 	* win/nmakehlp.c:
   65 
   66 2008-03-19  Jeff Hobbs  <jeffh@ActiveState.com>
   67 
   68 	*** TLS 1.6 TAGGED ***
   69 
   70 	* Makefile.in (dist): update to include win/ and file.srl
   71 
   72 	* win/makefile.vc: bump version to 1.6
   73 	* configure.in: use -L and -R where necessary. [Bug 1742859]
   74 
   75 	* aclocal.m4: improve --with-ssl-dir check.
   76 
   77 	* tests/tlsIO.test (tlsIO-14.*):   Add tls::unimport for symmetry
   78 	* tls.htm, tls.c (UnimportObjCmd): to tls::import. [Bug 1203273]
   79 
   80 	* tls.c (Tls_Clean, ImportObjCmd): Fix cleanup mem leak [Bug 1414045]
   81 	Use better Eval APIs, cleaner Tcl_Obj-handling.
   82 
   83 2008-03-19  Pat Thoyts  <patthoyts@users.sourceforge.net>
   84 
   85 	* win/Makefile.vc  Updated the nmake build files with MSVC9 support
   86 	* win/rules.vc:    and fixed to run the test-suite properly.
   87 	* win/nmakehlp.c:
   88 	* tls.tcl (tls::initlib): Corrected namespace handling.
   89 	* tls.c: Applied #1890223 to fix handshake on non-blocking sockets
   90 
   91 2008-03-17  Jeff Hobbs  <jeffh@ActiveState.com>
   92 
   93 	* tls.tcl (tls::initlib):     load tls.tcl first and call
   94 	* Makefile.in (pkgIndex.tcl): tls::initlib to load library to
   95 	handle cwd changes. [Bug 1888113]
   96 
   97 2007-09-06  Pat Thoyts  <patthoyts@users.sourceforge.net>
   98 
   99 	* tls.c:           Silence 64 bit integer conversion warnings
  100 	* win/nmakehlp.c:  Update build system to support AMD64 target
  101 	* win/makefile.vc: with MSVC8
  102 	* win/rules.vc:
  103 
  104 2007-06-22  Jeff Hobbs  <jeffh@ActiveState.com>
  105 
  106 	* tlsIO.c (TlsInputProc, TlsOutputProc, TlsWatchProc): 
  107 	* tls.c (VerifyCallback): add an state flag in the verify callback
  108 	that prevents possibly recursion (on 'update'). [Bug 1652380]
  109 
  110 	* tests/ciphers.test: reworked to make test output cleaner to
  111 	understand missing ciphers (if any)
  112 
  113 	* Makefile.in, tclconfig/tcl.m4: update to TEA 3.6
  114 	* configure, configure.in:       using autoconf-2.59
  115 
  116 2007-02-28  Pat Thoyts  <patthoyts@users.sourceforge.net>
  117 
  118 	* win/makefile.vc: Rebase the DLL sensibly. Additional libs for 
  119 	static link of openssl.
  120 	* tls.tcl: bug #1579837 - TIP 278 bug (possibly) - fixed.
  121 
  122 2006-03-30  Pat Thoyts  <patthoyts@users.sourceforge.net>
  123 
  124 	* tclconfig/*:  Updated to TEA 3.5 in response to bug 1460491
  125 	* configure*:   Regenerated configure.
  126 
  127 2005-02-08  Jeff Hobbs  <jeffh@ActiveState.com>
  128 
  129 	* Makefile.in, tclconfig/tcl.m4: update to TEA 3.2
  130 	* configure, configure.in:       using autoconf-2.59
  131 
  132 2004-12-23  Pat Thoyts  <patthoyts@users.sourceforge.net>
  133 
  134 	* Makefile.in:      Removed spurious copying of tls.tcl into the
  135 	                    build directory.
  136 
  137 2004-12-22  Pat Thoyts  <patthoyts@users.sourceforge.net>
  138 
  139 	* configure.in:     Incremented minor version to 1.5.1
  140 	* configure:        
  141 
  142 2004-12-17  Pat Thoyts  <patthoyts@users.sourceforge.net>
  143 
  144 	* win/makefile.vc:  Added the MSVC build system (from the Tcl
  145 	* win/rules.vc:     sampleextension).
  146 	* win/nmakehlp.c:
  147 	* win/tls.rc        Added Windows resource file.
  148 	
  149 	* tls.tcl:          From patch #948155, added support for
  150 	                    alternate socket commands.
  151 	* tls.c:            Quieten some MSVC warnings. Prefer ckalloc
  152 	                    over Tcl_Alloc. (David Graveraux).
  153 
  154 2004-06-29  Pat Thoyts  <patthoyts@users.sourceforge.net>
  155 
  156 	* tls.c:            Fixup to build against tcl 8.3.3. Handle
  157 	* tlsIO.c:          8.4 constification.
  158 
  159 	* tlsInt.h:         Added headers required with MSVC on Win32.
  160 	* tlsX509.c:        undef min and max if defined (win32).
  161 
  162 	* Makefile.in:      Fixed to build on win32 using msys with
  163 	* aclocal.m4:       MSVC. Also fixed the test target.
  164 	* configure.in:
  165 	* configure:        Regenerated.
  166 	* tclconfig/tcl.m4: Updated to most recent version.
  167 
  168 2004-03-23  Dan Razzell <research@starfishsystems.ca>
  169 	* tls.c:
  170 	* tlsBIO.c:
  171 	* tlsIO.c:
  172 	* tlsInt.h:	Fixed type match warnings.
  173 
  174 2004-03-19  Jeff Hobbs  <jeffh@ActiveState.com>
  175 
  176 	* tls.c (Tls_Init):   replaced older TEA config with newer
  177 	* config/* (removed):
  178 	* pkgIndex.tcl.in, strncasecmp.c (removed):
  179 	* Makefile.in, aclocal.m4, configure, configure.in:
  180 	* tclconfig/README.txt, tclconfig/install-sh, tclconfig/tcl.m4:
  181 
  182 2004-03-17  Dan Razzell <research@starfishsystems.ca>
  183 
  184 	* tlsX509.c:	Add support for long serial numbers per RFC 3280.
  185 			Format is now hexadecimal. 
  186 			[Request #915313]
  187 			Correctly convert certificate Distinguished Names
  188 			to Tcl string representation.  Eliminates use of
  189 			deprecated OpenSSL function.  Format is now compliant
  190 			with RFC 2253.  [Request #915315]
  191 
  192 2004-02-17  Dan Razzell <research@starfishsystems.ca>
  193 
  194 	TLS 1.5.0 RELEASE
  195 
  196 2004-02-12  Dan Razzell	<research@starfishsystems.ca>
  197 
  198 	* tls.c:	Allow verify callback to return empty result.
  199 	* tls.htm:	Document callback behaviors.
  200 
  201 2004-02-11  Dan Razzell	<research@starfishsystems.ca>
  202 
  203 	* tests/tlsIO.test:
  204 	* remote.tcl:	Complete private key name changes from 2001-06-21.
  205 
  206 2004-02-03  Dan Razzell <research@starfishsystems.ca>
  207 
  208 	* Makefile.in:	Removed circular dependency.
  209 	* tlsInt.h:	Make function declarations explicit.
  210 	* tls.c:	Fix type match and unused variable warnings.
  211 	* tlsBIO.c:	Fix type match warning.
  212 
  213 2003-12-15  Dan Razzell	<research@starfishsystems.ca>
  214 
  215 	* pkgIndex.tcl.in:
  216 	* tls.htm:
  217 	* tests/tlsIO.test: updated version to 1.5.
  218 
  219 2003-10-07  Dan Razzell	<research@starfishsystems.ca>
  220 
  221 	* tests/ciphers.test: updated list of tested ciphers to correspond
  222 	* with those available from OpenSSL. [Request #811981]
  223 
  224 2003-10-07  Dan Razzell <research@starfishsystems.ca>
  225 
  226 	* tls.c: added CONST with intent similar to those from 2002-02-04.
  227 	[Request #811911]
  228 
  229 2003-07-07  Jeff Hobbs  <jeffh@ActiveState.com>
  230 
  231 	* tls.c (Tls_Init):   added tls::misc command provided by
  232 	* tlsX509.c:          Wojciech Kocjan (wojciech kocjan.org)
  233 	* tests/keytest1.tcl: to expose more low-level SSL commands
  234 	* tests/keytest2.tcl:
  235 
  236 2003-05-15  Dan Razzell	<research@starfishsystems.ca> 
  237 
  238 	* tls.tcl:
  239 	* tlsInt.h:
  240 	* tls.c: add support for binding a password callback to the socket.
  241 	Now each socket can have its own command and password callbacks instead
  242 	of being forced to have all password management pass through a common
  243 	procedure.  The common password procedure is retained for compatibility
  244 	but its use should be DEPRECATED.
  245 	Add version command to return OpenSSL version string.
  246 	Remove unstable workarounds needed for verify in obsolete versions of
  247 	OpenSSL.
  248 	Fix memory leak. [Request #640660]
  249 	More casts to eliminate compiler warnings.
  250 
  251 	* tls.htm: document password callback.
  252 	Correct technical and typographic errors.
  253 
  254 	* README.txt: identify versions of OpenSSL which fix known problems.
  255 	General warning of security problems in older versions of OpenSSL.
  256 
  257 2002-02-04  Jeff Hobbs  <jeffh@ActiveState.com>
  258 
  259 	* tls.htm:
  260 	* tls.c: added support for local certificate status check, as well
  261 	as returning the # of bits in the session key. [Patch #505698] (rose)
  262 
  263 	* tls.c:
  264 	* tlsIO.c:
  265 	* tlsBIO.c: added CONSTs to satisfy Tcl 8.4 sources.  This may
  266 	give warnings when compiled against 8.3, but they can be ignored.
  267 
  268 	* tests/simpleClient.tcl:
  269 	* tests/simpleServer.tcl: point to updated client/server key files.
  270 
  271 	* tests/tlsIO.test:
  272 	* tests/ciphers.test: updated to load tls from build dir.
  273 
  274 	* Makefile.in: removed strncasecmp from default object set.  This
  275 	is only needed on the Mac, and Tcl stubs provides it.
  276 
  277 	* configure: regen'ed.
  278 	* configure.in: updated to 1.5.0 for next release.
  279 	Changed default openssl location to /usr/local/ssl (this is where
  280 	openssl 0.9.6c installs by default).
  281 	Changed to use public Tcl headers (private not needed).
  282 
  283 2001-06-21  Jeff Hobbs  <jeffh@ActiveState.com>
  284 
  285 	TLS 1.4.1 RELEASE
  286 
  287 	* configure: added configure to CVS
  288 	* configure.in: moved to patchlevel 1.4.1
  289 
  290 	* Makefile.in: corrected 'dist' target
  291 
  292 	* tests/certs/file.srl:
  293 	* tests/certs/ca.pem:
  294 	* tests/certs/client.key:
  295 	* tests/certs/client.pem:
  296 	* tests/certs/client.req:
  297 	* tests/certs/privkey.pem:
  298 	* tests/certs/server.key:
  299 	* tests/certs/server.pem:
  300 	* tests/certs/server.req:
  301 	* tests/certs/cacert.pem: replaced by new ca.pem
  302 	* tests/certs/skey.pem: replaced by new server.key
  303 	* tests/certs/ckey.pem: replaced by new client.key
  304 	* tests/certs/README.txt: new set of test certificates with some
  305 	README info on their generation.
  306 
  307 	* tests/ciphers.test: updated ciphers expected with default
  308 	openssl build.
  309 
  310 	* tests/tclIO.test: updated to use new names for certs/keys.
  311 
  312 2001-03-14  Jeff Hobbs  <jeffh@gimlet.activestate.com>
  313 
  314 	* tls.c (Tls_Init): add do/while for random number initialization
  315 	to work around some OSes quirks.  (Ralph.Billes@teltech.com.au)
  316 
  317 2000-09-07  Jeff Hobbs  <hobbs@scriptics.com>
  318 
  319 	* tlsIO.c (Tls_ChannelType): set typeName field of channel type to
  320 	"tls" (this got lost in move to dynamic version compatability
  321 	checking).
  322 
  323 2000-08-23  Jeff Hobbs  <hobbs@scriptics.com>
  324 
  325 	TLS 1.4 RELEASED
  326 
  327 	* Makefile.in (dist): create dist target for archive distributions
  328 
  329 	* tests/tlsIO.test (tlsIO-8.1): added a delay on the accept close
  330 	to make the test work with OpenSSL on Windows (doesn't affect
  331 	other builds).
  332 
  333 	* tls.htm: updated with notes for 1.4.
  334 
  335 2000-08-21  Jeff Hobbs  <hobbs@scriptics.com>
  336 
  337 	* tests/tlsIO.test: require at least tls1.4 in test suite.
  338 
  339 2000-08-18  Jeff Hobbs  <hobbs@scriptics.com>
  340 
  341 	* tls.c (Tls_Init): added call to RAND_seed to seed the SSL random
  342 	number generator.  Without this, OpenSSL 0.9.5 chokes, and in any
  343 	case it is a big security hole to do without it.
  344 
  345 	* configure.in (OPENSSL): added NO_IDEA and NO_RC5 defines by
  346 	default when compiling with OpenSSL.
  347 
  348 	* tlsInt.h: added err.h include
  349 
  350 	* tlsBIO.c:
  351 	* tlsIO.c: corrected pedantic cast errors.
  352 
  353 2000-08-16  Jeff Hobbs  <hobbs@scriptics.com>
  354 
  355 	* tests/ciphers.test: improved ability to change constraint
  356 	setting for whether user compiled against RSA or OpenSSL libs.
  357 
  358 	* tls.c (Tls_Init): corrected interpretation of version number
  359 	(patchlevel and release/serial were swapped).
  360 
  361 2000-08-15  Jeff Hobbs  <hobbs@scriptics.com>
  362 
  363 	* README.txt: added notes about need to use 8.2.0+.
  364 
  365 	* tlsInt.h:
  366 	* tls.c:
  367 	* tlsIO.c: corrected structure initialization to work when
  368 	compiling with 8.2.  Now compiles with 8.2+ and tested to work
  369 	with 8.2+ and dynamically adjust to the version of Tcl it was
  370 	loaded into.  TLS will fail the test suite with Tcl 8.2-8.3.1.
  371 
  372 	* tests/all.tcl: added catch around ::tcltest::normalizePath
  373 	because it doesn't exist in pre-8.3 tcltest.
  374 
  375 	* tests/simpleClient.tcl: 
  376 	* tests/simpleServer.tcl: added simple client/server test scripts
  377 	that use test certs and can do simple stress tests.
  378 
  379 2000-08-14  Jeff Hobbs  <hobbs@scriptics.com>
  380 
  381 	* tlsInt.h:
  382 	* tlsIO.c:
  383 	* tlsBIO.c:
  384 	* tls.c: changed around to only working with 8.2.0+ (8.3.2+
  385 	preferred), with runtime checks for pre- and post-io-rewrite.
  386 
  387 	* tls.c (Tls_Init): changed it to require 8.3.2 when Tcl_InitStubs
  388 	was called because we don't want people using TLS with the
  389 	original stacked channel implementation.
  390 
  391 2000-07-26  Jeff Hobbs  <hobbs@scriptics.com>
  392 
  393 	* merged all changes from tls-1-3-io-rewrite back into main branch
  394 
  395 	* tests/tlsIO.test: updated comments, fixed a pcCrash case that
  396 	was due to debug assertion in Windows SSL.
  397 
  398 	* tls.c (ImportObjCmd): removed unnecessary use of 'bio' arg.
  399 	(Tls_Init): check return value of SSL_library_init.  Also lots of
  400 	whitespace cleanup (more like Tcl Eng style guide), but not all
  401 	code was cleaned up.
  402 
  403 	* tlsBIO.c: minor whitespace cleanup
  404 
  405 	* tlsIO.c: minor whitespace cleanup.
  406 	(TlsInputProc, TlsOutputProc): Added ERR_clear_error before calls
  407 	to BIO_read or BIO_write, because we could otherwise end up
  408 	pulling an error off the stack that didn't belong to us.  Also
  409 	cleanup up excessive use of gotos.
  410 
  411 2000-07-20  Jeff Hobbs  <hobbs@scriptics.com>
  412 
  413 	* tests/tlsIO.test: corrected various tests to be correct for TLS
  414 	stacked channels (as opposed to the standard sockets the test
  415 	suite was adopted from).  Key differences are that TLS cannot
  416 	operate in one process without all channels being non-blocking, or
  417 	the handshake will block, and handshaking must be forced in some
  418 	cases.  Also, handshakes don't seem to complete unless the client
  419 	has placed at least one byte for the server to read in the channel.
  420 
  421 	* tests/remote.tcl: corrected the finding of tests certificates
  422 
  423 	* tlsIO.c (TlsCloseProc): removed deleting of timer handler as
  424 	that is handled by Tls_Clean.
  425 
  426 	* tls.tcl (tls::_accept): corrected the internal _accept to
  427 	trickle callback errors to the user.
  428 
  429 	* Makefile.in: made the install-binaries target regenerate the
  430 	pkgIndex.tcl correctly.  The test target probably shouldn't screw
  431 	it up, but this is to be on the safe side.
  432 
  433 2000-07-17  Jeff Hobbs  <hobbs@scriptics.com>
  434 
  435 	* pkgIndex.tcl.in:
  436 	* configure.in: updated version to 1.4
  437 
  438 2000-07-13  Jeff Hobbs  <hobbs@scriptics.com>
  439 
  440 	* tests/tlsIO.test: enabled tests 2.10, 7.[1245] (there is no 3),
  441 	which now pass.  Added some comments to other failing tests.
  442 
  443 2000-07-11  Jeff Hobbs  <hobbs@scriptics.com>
  444 
  445 	* tlsIO.c: changed all the channel procs to start with Tls* for
  446 	better parity when comparing with Transform channel procs.
  447 	Rewrote TlsWatchProc, added TlsNotifyProc according to the new
  448 	channel design, which also leaves TlsChannelHandler unused.
  449 
  450 	* tlsBIO.c (BioCtrl): changed BIO_CTRL_FLUSH case to use
  451 	Tcl_WriteRaw instead of Tcl_Flush (to operate on correct channel
  452 	in the stack instead of starting at the top again).  Would
  453 	otherwise cause a recursive stack bomb when implicit handshaking
  454 	took effect.
  455 
  456 	* tests/tlsIO.test: removed changes made to test suite (all tests
  457 	that ran before now pass correctly), and changed some accept proc
  458 	args to reflect that a sock is an arg, not a file.
  459 
  460 2000-07-10  Jeff Hobbs  <hobbs@scriptics.com>
  461 
  462 	* tlsBIO.c (BioWrite, BioRead): changed Tcl_Read/Write to
  463 	Tcl_ReadRaw/TclWriteRaw.
  464 
  465 	* tls.c: added use of Tcl_GetTopChannel after Tcl_GetChannel and
  466 	got return value from Tcl_StackChannel.
  467 
  468 	* tests/tlsIO.test: added some handshaking that shouldn't be
  469 	necessary, but we crash otherwise (needs more testing).
  470 
  471 	* tlsIO.c: added support for "corrected" stacked channels.  All
  472 	the above channels are in TCL_CHANNEL_VERSION_2 #ifdefs.
  473 
  474 2000-06-05  Scott Stanton  <stanton@ajubasolutions.com>
  475 
  476 	* Makefile.in: Fixed broken test target.
  477 
  478 	* tlsInt.h: 
  479 	* tls.c: Cleaned up declarations of Tls_Clean to avoid errors on
  480 	Windows (lint).
  481 
  482 2000-06-05  Brent Welch <welch@ajubasolutions.com>
  483 
  484 	* tls.c, tlsIO.c:  Split Tls_Free into Tls_Clean, which does
  485 	the SSL cleanup, and the Tcl_Free call.  It is important to shutdown
  486 	the SSL state "synchronously" during a stacked flush.
  487 
  488 2000-06-01  Scott Stanton  <stanton@ajubasolutions.com>
  489 
  490 	* tlsIO.c: Restored call to Tcl_NotifyChannel from ChannelHandler
  491 	to ensure that events propagate from the lower driver.  This may
  492 	result in an infinite loop in some cases, so this is not a total
  493 	fix.  This may be sufficient for now, however. [Bug: 5623]
  494 
  495 2000-06-01  Scott Stanton  <stanton@scriptics.com>
  496 
  497 	* tlsIO.c: Restore the previous version.  Fixed the CloseProc so
  498 	it unregisters the channel handler on the superceded channel
  499 	instead of the upper channel. Also removed the call to
  500 	Tcl_NotifyChannel in the ChannelHandler because this will result
  501 	in an infinite loop if data is ever buffered in the BIO
  502 	structure. [Bug: 5623]
  503 
  504 2000-05-31  Brent Welch <welch@scriptics.com>
  505 
  506 	* tls.c: Change the ChannelHandler to be registered on the main
  507 	channel as oppsed to the "parent", or superceeded, channel.  This
  508 	is because the socket driver notifies the main channel, and there
  509 	are times with the main channel gets closed, but the superceded
  510 	one is not yet closed.  If the channel handler gets triggered in
  511 	this half-open state it is associated with the superceeded
  512 	channedl, but uses its private pointer to the main channel, which
  513 	is mostly destroyed.  Eliminated the redundant call to
  514 	Tcl_NotifyChannel from TlsWatchProc. [Bug: 5623]