[Info-vax] New VSI OpenSSL version released

[Neil Rieck]

On Thursday, April 21, 2022 at 12:34:12 AM UTC-4, Steven Schweda wrote:
> > This is OpenSSL V3, I believe. [...] 
> 
> Nope. That would look different. 
> 
> ITS $ prod show prod ssl* 
> ------------------------------------ ----------- --------- 
> PRODUCT KIT TYPE STATE 
> ------------------------------------ ----------- --------- 
> VSI I64VMS SSL V1.4-503 Full LP Installed 
> VSI I64VMS SSL1 V1.0-2UA Full LP Installed 
> VSI I64VMS SSL111 V1.1-1N Full LP Installed 
> VSI I64VMS SSL3 V3.0-1 Full LP Installed 
> ------------------------------------ ----------- --------- 
> 
> "111" and "3" might look similar in some sense, but they're 
> different. 
> 
> The link at https://vmssoftware.com/ > Products > OpenSSL , 
> https://vmssoftware.com/products/openssl/ , is broken. 
> 
> https://vmssoftware.com/products/ssl111/ works better, but the 
> "Latest Version 1.1-1m" part seems unlikely. Similar at 
> https://vmssoftware.com/products/list/ . 
> 
> And, as usual, the ".ZIPEXE" would benefit a little from "zip -A". 
> Using your own UnZip: 
> 
> warning [ITS$DKA0:[prod.VSI.SSL111.SSL111-V0101-1N-1]VSI-I64VMS-SSL111-V0101-1N- 
> 1.ZIPEXE;1]: 220160 extra bytes at beginning or within zipfile 
> (attempting to process anyway)

While I am no expert in this area (is anyone?), be aware of the fact that the organization behind OpenSSL is currently maintaining two product streams.

1) OpenSSL-1 is the product everyone should be using now
2) OpenSSL-3 is a product which will be targeted at FIPS (Federal Information Processing Standards)
     https://www.openssl.org/blog/blog/2021/09/22/OpenSSL3-fips-submission/

I have no clue as to whether these streams will ever merge

Neil Rieck
Waterloo, Ontario, Canada.
https://neilrieck.net/OpenVMS.html