[Info-vax] HP SSL V1.3 (and higher)

[Neil Rieck]

On Tuesday, February 28, 2012 5:35:50 PM UTC-5, Rich Jordan wrote:
> On Feb 28, 3:47 pm, Neil Rieck <n.ri... at sympatico.ca> wrote:
> > As many of you already know from my previous posts, the SSL CLU
> > command "openssl s_client -connect" does not work properly starting
> > with HP SSL V1.3 (and higher). It does work with CPQ SSL V1.1B and
> > lower (many thanks to the people who were able to provide me with
> > copies of the V1.1B patch kit)
> >
> > caveat: it is only this tool (which is used when debugging "client to
> > server" connectivity issues) which is broken. The SSL libraries and
> > other stuff (like certificate creation tools and s_server) are working
> > just fine.
> >
> > So this morning I opened a support case with HP and we've been pinging
> > emails back and forth. But I just received a response from them
> > acknowledging that a problem exists and they will kick it up to
> > engineering (a.k.a. a real programmer)
> >
> > Neil Rieck
> > Waterloo, Ontario, Canada.
> > http://www3.sympatico.ca/n.rieck/docs/openvms_notes_ssl.html
> 
> Glad to hear it.

Okay so today (March 5) HP informed me that this problem will not be fixed until the next official "HP release of OpenSSL for VMS" which is due sometime in April of 2012 (I hope it isn't released on April 1 :-)

To be fair, it is only the CLI command "openssl s_client" which is broken and no one else seems to have been squawking about it since it first broke sometime between 2005-6. That said, it appears that the rest of the world has already jumped to OpenSSL-1.0.0g so maybe we get a major upgrade along with my requested fixes.

Neil Rieck
Waterloo, Ontario, Canada.
http://www3.sympatico.ca/n.rieck/docs/openvms_notes_ssl.html#cli-1
---