===================================================================================================================

==================================================Release Notes================================================

===================================================================================================================

Symbian OS SSLv3.0/TLSv1.0 Implementation

Currently releases: All (Zephyr TLS Release)

(Updated by Nicky Mpamugo - 29/11/03)

Released components: 

		SSL.DLL (Symbian OS SSLv3.0/TLSv1.0 implementation)

		SECURESOCKET.DLL (although this will soon be updated to an ECOM Plugin).

Notes:

1). The SSL.DLL uses 2 DLLs provided by the Security subsystem (TLSPROVIDER.DLL and 

    SWTLSTOKENTYPEPLUGIN (ECOM plugin)). These DLLs provide an interface to the Security

    subsystem which provides cryptographic functionality for the protocol.

2). The pre-Zephyr release of the SSL/TLS component currently resides in the 

    \Networking\TLS\Version1 directory.

3). Dialog functionality (and hence the dialog subcomponent) has been removed from TLS.

    This functionality is now provided by the Security subsytem.

4). The Zephyr release of TLS provides Client Authentication (in addition to support for

    Handshake Re-negotiation).

5). The Adaptor subcomponent has been removed from the Zephyr release of TLS. All protocol 

    functionality is now implemented directly by the SSL DLL.

===================================================================================================================

Released components: 

		ssl.dll (EPOC SSLv3.0/TLSv1.0 implementation)

		secdlgsv.dll (ssl dialog server)

Note:

secdlgsv is a test version, only built until a proper one is released.

21/03/2003

Deleted source for regsecprot utility which was used to manage ssl adaptor

entries in commdb, as ced should be used to make these changes.

07/03/2000

Fixed Lint warnings and errors

06/03/2000

Known limitations:

Bug in crypto stops us from testing:

-RSA signature

-RC4 encryption

-RC2 encryption

-DES encryption

Only the following crypto suites have been tested.

SSL_RSA_EXPORT_WITH_DES40_CBC_SHA

SSL_RSA_WITH_3DES_EDE_CBC_SHA

Diffie Hellman not tested yet.

===================================================================================================================

==================================================ER5 Release Notes================================================

===================================================================================================================

EPOC32 SSL Implementation

Release notes

Currently releases: WINS - DEB, REL, UDEB, UREL

                    MARM - DEB, REL, UDEB, UREL 

                    (WARNING!: the unicode is untested)

Released components: 

                libeay32.dll (SSLeay crypto algorithms)

                crypto.dll (EPOC wrapper on libeay32.dll)

                certman.dll (EPOC certificate management module)

                secdlgsv.dll (EPOC Security Dialog Server)

                ssl.dll (EPOC SSLv3.0 implementation)

                tcpip.prt (Enhanced EPOC TCPIP for SSL)

                wtlhttps.dll (EPOC Web browser module to support HTTPS).

RUNNING IN WINS:

================

1) Install WINS ROM on fresh subst'd drive by running

r:\protea\release\install on that drive's root directory.

2) Get the WINS message suite (msgsw029.zip) from the 

MSGSUITE Defects Notes database (in the software releases 

section).  Unzip this into \epoc32\.

3) Cannot build the HTTPS module - have to pull that down via

an "mnt getrel".

4) To build security releaseables, do "mnt getcomps" followed 

by a "mnt bldall".

5) Now you should be able to use the WINS browser securely.

To do so, remember that HTTPS URLS must have explicit port 443 

put into them. eg. "https://tls.cryptsoft.com:443".  The Lloyds 

online site thus requires the following URL:

"https://online.lloydsbank.co.uk:443/Customer.ibc"

RUNNING IN MARM:

================

1) On MARM, you need build and then copy the following files 

from \epoc32\release\marm\rel to \system\libs:

estlib.dll, libeay32.dll, cryptalg.dll, certman.dll, ssl.dll, 

secdlgsv.dll, tcpip.prt, wtlhttps.dll

2) The wtlhttps.dll for MARM is obtained by doing a "mnt getrel".

The EPOC Security Team

======================

Overall responsibility for design/releases - Mal Minhas (MM)

SSL enhancements/bug fixes and test code - Artem Simonian (AS)

Certificate Storage and management work - Will Bamberg (WB)

Crypto test code and certman work - Neil Hopcroft (NH)

KNOWN PROBLEMS/OMISSIONS IN THIS RELEASE:

=========================================

1) Certificate management and storage design and implementation. (WB)

2) Need to check out UNICODE security and rombuilding. (MM)

3) SSL socket closure via the SetOpt after opening. (AS)

4) bug in dialog server when it is called twice panics

on the line 203 of ..sv.cpp file

5) problemms with unicode build (possibly in the dialog server)

6) the actual ssl connection is not complete on the socket connect, 

but before the first read or write to the socket.

(the relevent code is in tcpip)

7) our stdlib replacement has a couple of issues with file accesses.

Also dont forget:

#################

5) Bogus libeay32 random number generation in libeay32 rand

directory.  Also constrained to 32-bit quantities at present. (Base)

KNOWN PROBLEMS with server sites

1) when connecting to www.conductor.com with 0x0A cipher suite the server 

sends improper MAC and finished message.  The problem is server side 

(no problems with lloyds site with the same 0x0A suite) (25.09.98)

Testing Software

=================

In tsrc loopback test allows us to see what happens when exchanged 

messages are modified.  The "test.txt" scrypt file allow to do these 

modifications. Massages are exchanged between two 

ssl providers. One emulates the server and another works as the client.

Version 1.00(519)

=================

(By Neil Hopcroft - 8-10-99)

Candidate-2 release for ER5 SWeb supplimentary project.

- updated test code and included test data for year 2000 testing

Version 1.00(518)

=================

(By Neil Hopcroft - 1-10-99)

Candidate-1 release for ER5 SWeb supplimentary project.

- updated libeay32 date handling code to y2k code reviewed version.

- removed potential access violation in big number library.

- improved sslweb and sslcer test code.

- rationalised released headers.

Version 1.00(517)

=================

(By Neil Hopcroft - 23-9-99)

Beta-7 release for ER5 SWeb supplimentary project.

- Fixed kludge in signature verification function to deal with explicit 

error return values (0/-1) and not just negative pointers, the assumption

that all pointers would be in the first half of the memory address space

was an incorrect assumption when running within the socket server thread

as that uses fixed system address space in the top half of memory when 

running on MARM. This caused the test results to appear correct but when 

the module was actually installed in the web browser no certificates 

verified.

- Fixed bug in state transition table which was masking the extent of 

the above bug by ignoring the certificate validation result under certain 

circumstances.

- Properly clean up new heap used in libeay.

Version 1.00(516)

=================

(By Neil Hopcroft - 17-9-99)

Beta-6 release for ER5 SWeb supplimentary project.

- CSSLFactory will now limit the number of open secure sockets to six 

to reduce the likelihood of hitting problematic out-of-memory situations

where the socket server heap fills with secure socket information. We 

cannot replace the socket server in ROM due (I believe) to its constantly

loaded state so we have to live within the heap limits the released 

version defines.

- SSLweb tests improved

Version 1.00(515)

=================

(By Neil Hopcroft - 14-9-99)

Beta-5 release for ER5 SWeb supplimentary project.

- Together with updated TCPIP fixes problems with reference counting

on the CSSLFactory object which were causing panics when there was

still sockets open and active when one socket was closed.

- A new local heap has been introduced in the libeay library, this

has eased some of the socket server memory problems which were causing

many things to not work. This has thrown out some of the out of memory

test code, which I shall attempt to rejig for the next release.

- SSLWeb test changed around to be multithreaded to test multiple open

secure sockets. The socket server appears to run out of memory at 

around 16 secure sockets open, at which point all currently open 

sockets experience failures. 

- Fixed niggly bug where names weren't coming out right if the 

requested part wasn't present, previous simple minded fix wasn't a fix.

Version 1.00(514)

=================

(By Neil Hopcroft - 7-9-99)

Beta-4 release for ER5 SWeb supplimentary project.

- Fixes problem with orphaned file server connections in our baby 

stdlib.

- A few other oddities and access violations fixed.

- Test code nearly set to perform coverage testing.

Version 1.00(513)

=================

(By Neil Hopcroft - 2-9-99)

Beta-3 release for ER5 supplimentary project.

- This release fixes most of the worst out-of-memory problems of the 

previous release, there are still a couple of issues that need to be 

addressed (the most severe being the implementation of fopen() in our

baby stdlib orphans connections to the file server).

- Small fix on the returning of names from the Cert->GetInfo() and 

CertIndex->CertList() functions, now clears descriptor if returned 

length is zero.

Version 1.00(512)

=================

(By Neil Hopcroft - 24-8-99)

Beta-2 release for ER5 supplimentary project.

- Done most of the OOM testing on Cryptalg and Certman dlls. The fixes for

some of the problems discovered has lead to some 'evil hackery' going on 

in the Libeay32 dll. I have added -1 as a valid return value from a number

of 'constructor' functions to allow differentiation between an end of list

and memory allocation failure, this has lead to a massive number of 

warnings being reported by both the MARM and WINS compilers but everything

is actually fairly consistent and everything that might actually be used

that can return a -1 will have it checked before it has the opportunity

to do any damage.

- SSL module has had no OOM testing yet, waiting for stability in Certman

and Cryptalg before starting.

- This release also fixes some oddities on the information returned by 

the Cert::GetInfo() call, mainly in the validity times.

- Also it should now disconnect when the user says dont connect in response

to an untrusted certificate.

Version 1.00(511)

=================

(By Neil Hopcroft - 3-8-99)

Beta-1 release for ER5 supplimentary project

- Put in some out of memory testing and handling, theres still some work to do.

Version 1.00(510)

=================

(By Neil Hopcroft - 27-7-99)

Alpha 2 release for ER5 supplimentary project

- fixed problems seen with many disconnects and timeouts, caused by defaulting to use TLSv1 not SSLv3.

- fixed memory leak in cryptalg/certman factory destruction, cryptalg factory was freeing up libeay memory when it hadn't allocated it, but when certman came to free it up later it had already been done.

- added secdlgcl.h and cryptalg.h to incc

- MNT BLDTEST now builds T_SSLPRT and T_RANDOM

- updated versions of dependancies.

- fixed problem with non-anonymous ephemeral Diffie-Hellman protocol negotiation, navigation through the action table for construction of block was flawed, although I suspect this won't have caused much more than the test code to fail.

- made dialog server .def files their own releasable, and added to putrel and delrel.

Version 1.00(509)

=================

(By Neil Hopcroft - 16-7-99)

Alpha release for ER5 supplimentary project.

- fixed empty certificate passed to dialog box

- build against .DEF files

- most compile time warnings (theres still a few - non-return function returning and a couple of longjmp will clobber... warnings and the browse info isn't building properly for T_SSLWEB.EXE)

- moved directory for trusted certificates to c:\system\data

- removed ssldata.h, everything that was in it is now in ssl.h

- added CCertIndex::CertList() to return an array of certificate information

- tidied up test code a bit

Version 1.00(506)

================

random number generator related stuff is in libeay.dll

search in files with #ifdef NEILRANDOM 

(tsl.h, md_rand.c)

Version 1.00(505)

================

Version 1.00(504)

================

Marm build testcode fix

Version 1.00(503)

================

Added certificate parsing code (based on ssleay and wrapped under certman.dll)

t_sslweb test connects to few https sites now.

Added md2 message digest to libeay.

Version 1.00(502)

================

10 November 1998

Getopt certificat return now TCertInfo object. New testcode t_sslweb which

 connects to https enabled web site. Mnt.cmd file bug fixes.

Version 1.00(501)

================

3 November 1998

Adding Unicode Uids.Upgrading components.

Version 1.00(500) == first official release

================

adding buildtest verb in the mnt.cmd file

Version 1.00(018)

:-(:-(:-(:-(:-(:-(

upgrading to vc5,remouving "ssl own tcpip" dependancies. 

Version 1.00(017)

:-):-):-):-):-):-)

14/10/98

Released by Artem

still changing tcpip subproject : added a little state machine to handle 

better SetOpts and GetOpts, complience with the new tcpip 504 with commdb.

Ssl now can renegociate crypto parameters when user does Setopt cipherSuite.

Added new testcode. Changed mnt.cmd file to get new components.

Version 1.00(016)

=================

02/10/98

Released by MalM

Removed unnecessary dependency on SSL from TCPIP which makes SSL.DLL

a DLL with a single exported gate function that creates a factory. 

Changes to TCPIP to handle this.  Removed dependency on EFSRV in SSL

too.  First attempt at building unicode security.  Changes to mnt.cmd

to handle unicode building.

Version 1.00(015)

-.-.-.-.-.-.-.-.-

Released by Artem

Added Rom directory (MM). Removed estlib.lib dependency for linking with 

libeay32. Various bug fixes. All components now compile for unicode (AS).

Version 1.00(014)

++++++++++++++++

Released by Artem

Also some fixes to mnt.cmd file (MM). Fixed bug in libeay when going twice on 

a secure web page and unloading SSL between these two actions. In tcpip added 

opening ssl provider when doing setopt with cahging cipher suites. Some SSL 

state machine enhancements.(AS)

Version 1.00(013)

=================

22/09/98

Released by MalM

Various fixes to mnt.cmd file.  Checked that "mnt getcomps" and 

"mnt bldall" work.  Implemented an "mnt valid".  Added design and 

API docs to the \security\docs directory.  Added the t_crypt test 

code to the release.

Version 1.00(012)

=================

22/09/98

Released by Artem

Migrated session variables from thread local storage to a separate 

CSSLSessionStore class which is created for each separate instance of

the tuple <appId,IP address>.  Also added changes to TCPIP code for 

test software to work in SSL server mode (listening).

Version 1.00(011)

=================

10/09/98

Released by Artem

to make work the loopback test one needs to put all the .txt files 

found in tsrc directory in /epoc32/wins/c 

(these tests are avalable only for wins)

Version 1.00(010)

=================

25/08/98

Released by MalM

SSL/CERTMAN/CRYPTALG and LIBEAY32 code checked for memory leaks.  Tls

in libeay32.dll now freeing properly and WINS web browser using https 

working within UHEAP_MARK/UHEAP_MARKEND on esock thread.  Can now

load/unload SSL-enabled browser in WINS :-).  Full UID2 checking

added to crypto,cert,ssl dlls.

Version 1.00(009)

=================

14/08/98

Released by MalM

SSL state machine fully implemented by Artem.  Active object added to

handle requests to dialog server to prevent esock thread hanging. 

Added heap checking code to dialog server thread and ensured it is

freeing all alloc'd cells.  Enhanced certman module to handle

certificate DN parsing etc.

Version 1.00(008)

=================

17/07/98

Released by MalM

Handshake message parser process HS messages cut in several records 

by the record protocol layer.  Alert code added.

No longer mbuf to TPtr8 byte by byte copying.

RSA signature verification for key exchange.

Ephemeral DH key exchange.

Version 1.00(007)

=================

05/06/98

Released by MalM

Added a rudimentary SSL dialog server (in \security\dialog). 

Enhanced certificate management API to support this 

From ArtemS: Added support for the following SSL cipher suites:

RSA_RC2_MD5, RSA_RC4_128_MD5, RSA_RC4_128_SHA, RSA_DES_CBC_40_SHA,

RSA_DES_CBC_SHA, RSA_DES_EDE3_CBC_SHA.  Improved stream cipher

MAC checking.

Version 1.00(006)

=================

08/05/98

Released by MalM

Fixed ServerKeyExchange - can now connect to tls.cryptsoft.com :-)

which is great because this site contains an experimental TLS server.

Now implementing all the factory code within SSL.DLL and not through

CNifFactory.  Fixed problems with loading https without doing http

first.  Added TSRC test code directory specific to EPOC32 SSL -

t_sock contains basic factory test code.

Version 1.00(005)

=================

29/04/98

Released by MalM

WINS DEB and MARM builds now in place.  Added a load of exports to

libeay32 code to handle MARM build.  Set 32 bit rand generator. 

Added code to SSL to handle ServerKeyExch.  Sorted out TLS - no more

static globals in libeay32.  Checked stack usage after which a couple 

of stack structs (>2k!) were moved into heap.

        e32     126     stdlib  014      esock 070

Version 1.00(004)

================

22/4/96

Released by MalM

FIRST INTERIM RELEASE of EPOC32 SSL implementation.

WINS build only and with no UI components.  Works with the web

browser release 1.01(108). The release consists of these modules:

* LIBEAY32.DLL - EPOC32 DLL containing SSLeay crypto/cert code

* CRYPTALG.DLL - EPOC32 wrapper over libeay32 crypto functions

* CERTMAN.DLL - EPOC32 wrapper over libeay32 certificate functions

* SSL.DLL - EPOC32 implementation of SSLv3.0 protocol

* TCPIP.DLL - Extended to handle the loading of SSL.DLL etc  

* WTLHTTPS.DLL - Allows web browser to parse "https://" Urls

Release allows for all the above except Wtlhttps.dll to be built

using the following components: 

        e32     126     stdlib  014      tcpip   064