Release Notes

Known Issues 23
RSA BSAFE Micro Edition Suite 4.4 Release Notes
BSFMES-1059 Application processing of the CertificateURL TLS extension
cannot set TLS alerts on processing failure.
BSFMES-1056 Using R_SSL_set_info() with SSL_INFO_TLS_ADD_EXT (or
R_SSL_CTX_set_info() with SSL_CTX_INFO_TLS_ADD_EXT)
does not copy in the TLS extension structure.
BSFMES-1054 The tls_ext_server.c sample program uses deprecated
functionality.
BSFMES-1053 OpenSSL compatibility mode for SSL session data is not compatible
with the OpenSSL format.
BSFMES-1036 A TLS server does not send a certificate status message on a
non-blocking IO return.
BSFMES-1023 An SSL client uses the default certificate/key pair regardless of
whether the pair was valid for the current connection attempt.
BSFMES-1017 MES does not check CRL validity when set against an
R_VERIFY_DETAIL object using
R_VERIFY_DETAILS_set_info() and
R_VERIFY_DETAIL_INFO_CRL.
BSFMES-1016 Certificate extended key usage printing does not print custom Key
Usage entries.
BSFMES-1014 SSL connection behavior is affected by the global error stack.
BSFMES-1013 Server-side SSL does not send a protocol version alert if versions
supported are higher than the supported client versions.
BSFMES-998 Unable to disable the internal session cache.
BSFMES-965 R_PEM_read_bio_SSL_SESSION() is not thread safe.
BSFMES-944 SSL external data management functions are not thread safe.
BSFMES-930 Extension printing fails for a CRL DP extension with a relative name
entry.
BSFMES-672 Attempting to store keys on a Safenet Luna-CA4 causes
TEMPLATE_INCONSISTENT error.
BSFMES-667 PKCS #11 certificate search by public key hash returns non-matching
certificates for CryptoKI devices with a version less than 2.20.
BSFMES-577 In certificate verification the public key is extracted from the
certificate of the issuer. If this certificate uses a non-conforming
algorithm (for example, rsa), verification returns a failure in
processing error, not a verification failure. This has a follow-on effect
that verification processing is stopped, and verification callback
functions that might include support are not called.
Table 5 Known Issues (continued)
ID Description