[Info-vax] SSL V3

[Stephen Hoffman]

On 2022-06-28 13:59:17 +0000, Dave Froble said:

> New from VSI this morning:
> 
> VSI SSL111 V0101-1O-1 (Secure Sockets Layer) is based on the OpenSSL 
> V1.1.1o release from the OpenSSL Group.

OpenSSL versions released so far this year:

21-Jun-2022    OpenSSL 3.0.4 is now available, including bug and security fixes
21-Jun-2022    OpenSSL 1.1.1p is now available, including bug and 
security fixes
03-May-2022    OpenSSL 3.0.3 is now available, including bug and security fixes
03-May-2022    OpenSSL 1.1.1o is now available, including bug and 
security fixes
15-Mar-2022    OpenSSL 3.0.2 is now available, including bug and security fixes
15-Mar-2022    OpenSSL 1.1.1n is now available, including bug and 
security fixes

Here are the known flaws in 1.1.1o: 
https://www.openssl.org/news/secadv/20220621.txt

AFAIK, that rehash feature is not automatically executed on OpenVMS, 
but VSI would know best.

Everything prior to 1.1.1 is considered out of support by OpenSSL.



-- 
Pure Personal Opinion | HoffmanLabs LLC