Hi,

Is there a brief on the reasons why someone would want to use OpenSSL 0.9.7j or choose to use 0.9.8b?

I believe one of the items is that the 0.9.7 branch can be part of a solution for FIPS compliance, where 0.9.8b is "not there" yet.

Is this correct? I'm at a point where I need to decide one release or the other, so I was curious if there was a pros and cons list
or other way about going forward with 0.9.7j or 0.9.8b

Thanks,
Randy

On May 4, 2006, at 7:57 AM, Dr. Stephen Henson wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


   OpenSSL version 0.9.8b and 0.9.7j released
   ==========================================

   OpenSSL - The Open Source toolkit for SSL/TLS
   http://www.openssl.org/

   The OpenSSL project team is pleased to announce the release of
   version 0.9.8b of our open source toolkit for SSL/TLS. This new
   OpenSSL version is a bugfix release and incorporates
   changes and bugfixes to the toolkit.  For a complete list of
   changes, please see http://www.openssl.org/source/exp/CHANGES.

We also release 0.9.7j, which contains several FIPS updates and bugfixes compared to 0.9.7i. It is the first full release of OpenSSL that can link
   against a validated FIPS module.

These updates contain several bugfixes to resolve compilation issues under
   Win32 and errors in CA creation via the CA.pl script.

   We consider OpenSSL 0.9.8b to be the best version of OpenSSL
   available and we strongly recommend that users of older versions
   upgrade as soon as possible. OpenSSL 0.9.8b is available for
   download via HTTP and FTP from the following master locations (you
   can find the various FTP mirrors under
   http://www.openssl.org/source/mirror.html):

     * http://www.openssl.org/source/
     * ftp://ftp.openssl.org/source/

   For those who want or have to stay with the 0.9.7 series of
   OpenSSL, we strongly recommend that you upgrade to OpenSSL 0.9.7j
   as soon as possible.  It's available in the same location as
   0.9.8b.

   The distribution file names are:

     * openssl-0.9.8b.tar.gz
       MD5 checksum: 12cedbeb6813a0d7919dbf1f82134b86
       SHA1 checksum: 99565db630a044fa484d4f91006a31908f262246

     * openssl-0.9.7j.tar.gz
       MD5 checksum: 79dd939266b069e7aca587e6ab16a055
       SHA1 checksum: 5277fa5a18d52fb0960e279fdbe198823f65da0b

   The checksums were calculated using the following commands:

    openssl md5 openssl-0.9.*.tar.gz
    openssl sha1 openssl-0.9.*.tar.gz

   Yours,

   The OpenSSL Project Team...

    Mark J. Cox             Nils Larsch         Ulf Möller
    Ralf S. Engelschall     Ben Laurie          Andy Polyakov
    Dr. Stephen Henson      Richard Levitte     Geoff Thorpe
    Lutz Jänicke            Bodo Möller



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iQEVAwUBRFoRVqLSm3vylcdZAQIc/wf/axfaQgNC5PlXz6P21RbjkTDiRKaJETsc
3TPTVcOe1VN1j3Be3d+eb/PJLigGDQa3wI3Yci483O7y0XMzRHmb+KQakH0BAvIE
5Zkp9/lfm2MmAyaW4iZmSmQvSwE4sUcoveR+9v9zsHCvhduzi+9g3/ngsQzV9euI
AmPptAfQJzp+AtKFfrOLTnYdNXGdhoKN+ItYCwqBsMrvew/8xKbCYwa29JtsM+Tm
sBJK5/hhv3UO9TrNp3NDMNPf2Xvc3P/vVG1MRqw4F3hCoCieAhcxkhMKbKF/hnZY
gMDXNYbtB/EY2G1IuoQ+9UbTaJEBs4wYjIWthlqQ5GaANtxYD8vmSQ==
=Uzvl
-----END PGP SIGNATURE-----
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to