OpenSSL (SSL = Secure Socket Layer), de bekende security software die encryptie functies aanbied die onder andere op webservers gebruikt kunnen worden, heeft een aantal belangrijke bugfixes uitgebracht, en deze verpakt in een nieuwe release van OpenSSL welke het versienummer 0.9.7e heeft gekregen. Het changelog bevat de volgende punten:
Changes between 0.9.7d and 0.9.7e
- Avoid a race condition when CRLs are checked in a multi threaded environment. This would happen due to the reordering of the revoked entries during signature checking and serial number lookup. Now the encoding is cached and the serial number sort performed under a lock.
Add new STACK function sk_is_sorted().- Add Delta CRL to the extension code.
- Various fixes to s3_pkt.c so alerts are sent properly.
- Reduce the chances of duplicate issuer name and serial numbers (in violation of RFC3280) using the OpenSSL certificate creation utilities. This is done by creating a random 64 bit value for the initial serial number when a serial number file is created or when a self signed certificate is created using 'openssl req -x509'. The initial serial number file is created using 'openssl x509 -next_serial' in CA.pl rather than being initialized to the value of 1.
