MatrixSSL 1.0 Beta 2
Releases
We have just released a second beta version of MatrixSSL for download. Final release is just around the corner, but we wanted to get our client side SSL implementation some beta time.
Release Notes:
- RC4-MD5 and RC4-SHA are now enabled by default.
- httpClient and httpReflector must be "Set As StartUp Project" project in their respective VisualStudio solutions in order to run automatically in the debugger in Windows.
- Certificate validation currently checks only that the certificate was signed by the root CA, and that other internals are consistent. User level checks of the distinguished name will be added in final release.
Change Log:
- Added client side SSL support
- Added X.509 certificate parsing and basic validation
- Added httpClient example
- Added several new APIs for client side SSL
- Enhanced client and reflector example with support for pipelined requests
- Fixed length check in record parsing that could lead to a comparison beyond memory boundaries.
- Fixed SSL record version check that could allow invalid record versions to be sent. As only SSLv3 was supported, this did not cause a security concern.
- Added workaround for bug in Microsoft Internet Explorer, where negotiated version is sent in the encrypted premaster secret, rather than the requested version as per specification.
- Minor updates to cryptography code suggested by Tom St. Denis.
March 02, 2004
