0.6.2 This is most bug fixes and functionality improvements. Additions are - More thread debugging patches, the thread stuff is still being tested, but for those keep to play with stuff, have a look in crypto/cryptlib.c. The application needs to define 1 (or optionaly a second) callback that is used to implement locking. Compiling with LOCK_DEBUG spits out lots of locking crud :-). This is what I'm currently working on. - SSL_CTX_set_default_passwd_cb() can be used to define the callback function used in the SSL*_file() functions used to load keys. I was always of the opinion that people should call PEM_read_RSAPrivateKey() and pass the callback they want to use, but it appears they just want to use the SSL_*_file() function() :-(. - 'enc' now has a -kfile so a key can be read from a file. This is mostly used so that the passwd does not appear when using 'ps', which appears imposible to stop under solaris. - X509v3 certificates now work correctly. I even have more examples in my tests :-). There is now a X509_EXTENSION type that is used in X509v3 certificates and CRLv2. - Fixed that signature type error :-( - Fixed quite a few potential memory leaks and problems when reusing X509, CRL and REQ structures. - EVP_set_pw_prompt() now sets the library wide default password prompt. - The 'pkcs7' command will now, given the -print_certs flag, output in pem format, all certificates and CRL contained within. This is more of a pre-emtive thing for the new verisign distribution method. I should also note, that this also gives and example in code, of how to do this :-), or for that matter, what is involved in going the other way (list of certs and crl -> pkcs7). - Added RSA's DESX to the DES library. It is also available via the EVP_desx_cbc() method and via 'enc desx'. .