OpenSSL A.00.09.08n.010, A.00.09.08n.011, and A.00.09.08n.012 release notes (5900-0899), June 2010

To create a self-signed certificate, use the following command:
$ openssl req -new -nodes -x509 -out cert.pem -keyout key.pem
-days 365 -subj "/C=US/ST=CA/L=City/CN=localhost/emailAddress=root@localhost"
OpenSSL resources
This section provides a list of sources from which you can obtain the OpenSSL software, and
pointers to obtain information about OpenSSL technology.
Getting the OpenSSL software
You can obtain OpenSSL A.00.09.07m and A.00.09.08n software from the following sources:
• HP Software Depot at: http://www.software.hp.com
• HP-UX Operating Environments (OEs)
TIP: The most recent version of OpenSSL is available at: http://www.software.hp.com
Learning about OpenSSL technology
A large volume of information exists on the Internet about OpenSSL technology. HP recommends
that you learn more about OpenSSL by reading O'Reilly's book Network Security with OpenSSL:
Cryptography for Secure Communications by John Viega, Matt Messier, and Pravir Chandra. You
can order this book from http://www.oreilly.com/
You can also learn about the OpenSSL technology at the following links:
• OpenSSL Website at: http://www.openssl.org/
• OpenSSL FAQ at: http://www.openssl.org/support/faq.html
• OpenSSL mailing list at: http://marc.theaimsgroup.com/?l=openssl-users
• The Transport Layer Security (TLS) Internet Engineering Task Force (IETF) Working Groups
at: http://www.ietf.org/html.charters/wg-dir.html#Security%20Area
• OpenSSL APIs at: http://www.opensslbook.com/api/index.html
OpenSSL A.00.09.08n.010, A.00.09.08n.011, and A.00.09.08n012 Release Notes is available at the
following locations:
• The HTML and pdf versions are available at: http://www.hp.com/go/hpux-security-docs
(Internet and Security Solutions).
• A text version of the README.hp readme file in the /opt/openssl directory.
Frequently Asked Questions (FAQs)
Following are questions frequently asked about OpenSSL.
1 What does OpenSSL do? Why do I need it?
OpenSSL offers an advanced level of security using the SSL/TLS protocols. Client-server
applications that send and receive data over a network are open to a range of vulnerabilities.
They can use SSL/TLS to implement privacy (through encryption), tamper-proofing (through
message digests) and non-repudiation (through certificates and digital signatures).
2 What is the openssl command-line tool? Why do I need it?
The OpenSSL libraries (libssl and libcrypto - the 32 and 64-bit versions of the static
and shared libraries) define the OpenSSL product. The openssl command-line tool is an easy
way for you to quickly execute functions (for example, create certificates) without having to
write a new application for that purpose.
OpenSSL resources 21