[Info-vax] HPE contact for access to formerly "free" OpenSSL kits?

[Neil Rieck]

On Monday, March 4, 2019 at 8:27:22 AM UTC-5, Neil Rieck wrote:
> On Friday, March 1, 2019 at 12:05:31 PM UTC-5, Rod Regier wrote:
> > looks like the HP web site http://ftp.hp.com highwatered
> > with the creation and split for  HPE in Nov/2015.
> 
> Correct: if you drop this string into your browser:
> ftp://ftp.hp.com/pub/openvms/ssl/
> you'll see that the last mod_ssl binary patch for CSWS was in 2015
> MOD_SSL.EXE_IA64
> 
> I was waiting for the good folks at hpe to open up ftp://ftp.hpe.com
> but that never happened (I suspect that HPE never intended to give anything away because I did get newer versions of MOD_SSL.EXE_IA64 (Itanium) with a support agreement)
>  
> So what to do? Depending upon your site's complexity you may find it possible to replace CSWS with WASD. If this is not possible then I suggest getting a support contract with VSI (better) or HPE (hanging by a thread).
> 
> Hobbyists on a zero budget would need to add tweaks to the various ssl config files (like disabling SSL2 and SSL3, etc.)
>  
> Neil Rieck
> Waterloo, Ontario, Canada.
> http://neilrieck.net

I just checked the OpenVMS patches offered by HPE. For OpenVMS-8.4 there is nothing posted after 2018/11/30 (and none of these offerings apply to CSWS) so this support site looks like it's on life-support.

There is a patch titled HP-I64VMS-SSL1-V0100 but that is (mostly) for client-side software but not the thing baked into "APACHE$COMMON[MODULES]MOD_SSL.EXE"

Neil Rieck
Waterloo, Ontario, Canada.
http://neilrieck.net/links/openvms_resources.html