Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Matěj Cepl
On 2018-04-17, 22:36 GMT, Rob Marshall wrote: > The OS is SLES 10 SP3 and there are currently close to 80 > binaries that appear to use libssl.so.0.9.8. Whoever decided this platform is a good idea, was in my opinion wrong. https://en.wikipedia.org/wiki/SUSE_Linux_Enterprise tells me that a) th

Re: [openssl-users] ar : File format not recognized

2018-04-17 Thread Bill Kurland
On 4/17/2018 5:47 PM, Ludwig, Mark wrote: From: Bill Kurland, Tuesday, April 17, 2018 4:19 PM I'm trying to build openssl-1.1.0h on AIX 6.1 with the ultimate goal of building the IO::Socket::SSL perl module. make fails when creating libcrypto.a and libssl.a because, it seems, the *.o files ar

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Salz, Rich via openssl-users
>But I know someone is going to ask: Can you apply all of the newer security fixes to 0.9.8zh? So I'll ask...can I? The project stopped supporting 0.9.8 2+ years ago, and announced its plans 3+ years ago. Backporting fixes from 1.0.2 should be possible, but won't always be easy. It m

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Dennis Clarke
On 17/04/18 06:36 PM, Rob Marshall wrote: Hi, The OS is SLES 10 SP3 and there are currently close to 80 binaries that appear to use libssl.so.0.9.8. They are from a bunch of different packages, so I would imagine that updating to anything more recent than 0.9.8 would be a major hassle and possib

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Matt Caswell
On 17/04/18 23:36, Rob Marshall wrote: > Hi, > > The OS is SLES 10 SP3 and there are currently close to 80 binaries > that appear to use libssl.so.0.9.8. They are from a bunch of different > packages, so I would imagine that updating to anything more recent > than 0.9.8 would be a major hassle a

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Rob Marshall
Hi, The OS is SLES 10 SP3 and there are currently close to 80 binaries that appear to use libssl.so.0.9.8. They are from a bunch of different packages, so I would imagine that updating to anything more recent than 0.9.8 would be a major hassle and possibly not even possible. I did find openssl-0.

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Salz, Rich via openssl-users
>I have an application that runs on an old OS that currently has OpenSSL 0.9.8a So you should be able to compile and install the last 0.9.8 release, https://www.openssl.org/source/old/0.9.x/openssl-0.9.8zc.tar.gz Note that this is more than two years old. Many fixes have happened since

Re: [openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Dennis Clarke
On 17/04/18 05:34 PM, Rob Marshall wrote: Hi, I have an application that runs on an old OS ... I hate to be "that guy" and ask the dumb question but what OS is this and are you able to re-compile and re-link the application? Dennis -- openssl-users mailing list To unsubscribe: https://mta.o

Re: [openssl-users] ar : File format not recognized

2018-04-17 Thread Ludwig, Mark
> From: Bill Kurland, Tuesday, April 17, 2018 4:19 PM > > I'm trying to build openssl-1.1.0h on AIX 6.1 with the ultimate goal of > building the IO::Socket::SSL perl module. > > make fails when creating libcrypto.a and libssl.a because, it seems, the *.o > files are in a format not recognized b

[openssl-users] Applying security patches to 0.9.8a

2018-04-17 Thread Rob Marshall
Hi, I have an application that runs on an old OS that currently has OpenSSL 0.9.8a installed and many binaries dependent on libssl.so.0.9.8. Would it be possible to get the recent (it looks like 0.9.8a is pretty old) security patches and apply them to create an updated 0.9.8a? Thanks, Rob -- op

[openssl-users] ar : File format not recognized

2018-04-17 Thread Bill Kurland
I'm trying to build openssl-1.1.0h on AIX 6.1 with the ultimate goal of building the IO::Socket::SSL perl module. make fails when creating libcrypto.a and libssl.a because, it seems, the *.o files are in a format not recognized by ar I've passed "-Wl,-baix5coff64-rs6000" in config. I've also

[openssl-users] OpenSSL verssion 1.1.1 pre release 5 published

2018-04-17 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 OpenSSL version 1.1.1 pre release 5 (beta) === OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ OpenSSL 1.1.1 is currently in beta. OpenSSL 1.1.1 pre release 5 has now

[openssl-users] ALPN and SSL_set_SSL_CTX

2018-04-17 Thread Christophe Truc
Hi! My application server can receive 2 types of incoming connections, either from user requests (such as Firefox) or from a proprietary client for which the HTTP requests are controlled. I want to enforce client verification for the proprietary client connections, not for the user requests. Unfo