OpenSSL.0.9.2b.2.m.README
April 23, 1999

This archive contains an Installer.app package for an OpenStep framework
for OpenSSL.  This is port #2 of openssl version 0.9.2b.  
This US/Canada distribution of OpenSSL requires the installation of the 
RSAref framework (see below for more explanation) to function.

file:	OpenSSL.0.9.2b.2.m.NIS.b.tar.gz
desc:	bare-bones end-user distribution
sum:	62583  1246
md5sum:	f76ea2c099c846ab0ab94b572d621762

file:  	OpenSSL-Dev.0.9.2b.2.m.NIS.bs.tar.gz
desc:  	bare-bones + headers + static libs + source
sum:   	09259  5579
md5sum:	278804aa69d290ab1ed9d9f3842864a9


(**
 to be placed at ??
 http://www.peak.org/openstep/mach/sourcelibrary/frameworks/
 ftp://ftp.next.peak.org/pub/openstep/mach/sourcelibrary/frameworks/
**)


INSTALLATION

Install the framework to /LocalLibrary/Frameworks.  This is the easiest
place to put it, and software built with this framework expects it to
be there.  Alternate locations are possible, only if you know what you
are doing and/or you don't mind playing with the Makefile in the 
framework to change the default installation parameters.

* If you are in the US/Canada:

Due to RSA patents (fortunately due to run out near the end of 1999) you
are required to use the RSAref version of this cyptographic library.
Don't worry, that is the default option in this distribution of
OpenSSL.  The RSAref version of OpenSSL requires you to also install
the RSAref.framework as well (available, most likely, where you found
OpenSSL.framework).

Be aware, also, that RSAref is for non-commercial use only, (to quote
from the RSAref license.txt): "The Program may not be used directly
for revenue-generating purposes" so that implies that this framework is
under similar restriction of use.

* If you are outside the US/Canada

Due to US export law, it is illegal to export this software from the US.
Furthermore, due to RSAref licensing restrictions, RSAref is usable
only in the US.  In short, you're not allowed to use this framework.
Fortunately, there are (I've been told) non-RSAref versions of this
framework available at peanuts:
http://www.peanuts.org/


NOTES

Applications that have been built to use (or that CAN use) this framework
include:
apache	1.3.6	( w/ mod_so support + mod_ssl >= 2.2.7 )
HTTPS 	1.05	(OmniWeb 3.0b9 plugin)
(AND coming soon, hopefully, lynx-SSL).


CHANGELOG

Apr 23, 1999  	(0.9.2b port #2 addendum)
- Fixup README to mention RSAref, export/use restrictions.
- Add reference to HTTPS (v1.05) plugin for OmniWeb (v3.0b9)

Apr 12, 1999	(0.9.2b port #2)
- Apply rsaoaep patch as per
  http://www.openssl.org/source/openssl-0.9.2b-rsaoaep.patch
  This affects the RSA tests only (for developers).
- Ensure -O optimized version of OpenSSL end-user distrib. 
- Fix packaging problem with OpenSSL-Dev.pkg

See CHANGELOG inside of framework for details of recent changes.


CREDITS

OpenSSL home page
http://www.openssl.org/

Framework Build
Rex Dieter <rdieter@math.unl.edu>
Computer System Manager
University of Nebraska-Lincoln
Department of Mathematics and Statistics
http://www.math.unl.edu/~rdieter/