@@ -1,9 +1,9 @@ Copyright (C) 1997-2000 Matt Newman TLS 1.4.1 Copyright (C) 2000 Ajuba Solutions -$Header: /home/rkeene/tmp/cvs2fossil/../tcltls/tls/tls/README.txt,v 1.3 2001/06/21 23:34:20 hobbs Exp $ +$Header: /home/rkeene/tmp/cvs2fossil/../tcltls/tls/tls/README.txt,v 1.4 2003/05/15 20:44:46 razzell Exp $ TLS (aka SSL) Channel - can be layered on any bi-directional Tcl_Channel. Both client and server-side sockets are possible, and this code should work on any platform as it uses a generic mechanism for layering on SSL and Tcl. @@ -19,11 +19,15 @@ . Full filevent sematics should also be intact - see tests directory for blocking and non-blocking examples. -This was built (almost) from scratch based upon observation of OpenSSL 0.9.2B +This was built (almost) from scratch based upon observation of OpenSSL 0.9.2b. +For correct functioning, use OpenSSL 0.9.6g or later. This release contains +important fixes to memory management, as well as incorporating the verify +callback correction which appeared in OpenSSL 0.9.6c. For best security, use +the latest official release of OpenSSL. Addition credit is due for Andreas Kupries (a.kupries@westend.com), for providing the Tcl_ReplaceChannel mechanism and working closely with me to enhance it to support full fileevent semantics.