>From: owner-openssl-us...@openssl.org On Behalf Of Walter H.
>Sent: Tuesday, 26 March, 2013 15:16
>the major features that 1.0.x supports are
>openssl ts (http://www.openssl.org/docs/apps/ts.html)
>openssl cms (http://www.openssl.org/docs/apps/cms.html)
Although much of 'cms' was already in 'smime'.
Also on commandline: "generic" pkeyparam, genpkey, pkey, pkeyutl.
In library corresponding EVP_PKEY_CTX stuff.
A small but sometimes important change: digest/signature are now
distinct so you can do e.g. ecdsa-sha256 as well as ecdsa-sha1.
For x509 verification (including during SSL/TLS handshake) using
"CApath" (directory of cert files with hashnames or links)
the hash algorithm changed and these must be re-hashed.
1.0.*1* adds TLSv1.1 and 1.2 (including GCM and SHA2 suites).
<snip>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
