OpenSSL A.00.09.08n.010, A.00.09.08n.011, and A.00.09.08n.012 release notes (5900-0899), June 2010

NOTE: The openssl command-line tool is a 32–bit application. It uses the 32–bit static
OpenSSL libraries.
3 There are several flavours of libraries available in OpenSSL A.00.09.07m and OpenSSL
A.00.09.08n. What are they? How do I know when to use which library?
Use the OpenSSL A.00.09.07m and OpenSSL A.00.09.08n libraries for 32-bit and 64-bit
applications. Both the 32-bit and 64-bit versions of the libraries are provided. For a list of all
the library files, see“OpenSSL libraries” (page 10). You can also choose to create user
applications using either a static library or a shared library. In addition, OpenSSL A.00.09.08n
contains libraries that support hardware ENGINES.
4 How do I switch between OpenSSL A.00.09.07m and OpenSSL A.00.09.08n?
During installation, the depot installs OpenSSL A.00.09.07m and OpenSSL A.00.09.08n in
the /opt/openssl/0.9.7 and /opt/openssl/0.9.8 directories, respectively. These
directories contain binaries, libraries, manpages, and other files specific to each version of
OpenSSL. The /opt/openssl/switchversion.sh script switches between these two
versions. To change the version of OpenSSL, execute the script as follows:
$ /opt/openssl/switchversion.sh
You can also choose to switch the openssl.cnf file based on the version of OpenSSL.
However this is not necessary.
5 How are the performances compared to the Open Source version 0.9.7m or 0.9.8g respectively?
The two products have the same base source code. There is no difference in performance,
other conditions remaining the same. However, the performance of several openssl library
functions is dictated by the random number generator on the system. The /dev/urandom
and /dev/random devices perform better than prngd. You can download /dev/random
at:
http://software.hp.com
6 Does installing OpenSSL require a kernel rebuild?
No. OpenSSL contains application libraries and a command-line tool. It does not require a
kernel rebuild or system reboot.
7 How can I install OpenSSL A.00.09.07m or A.00.09.08n?
You can install OpenSSL A.00.09.07m or A.00.09.08n from the application CD or the Web
using the swinstall command.
8 How can I uninstall OpenSSL A.00.09.07m or A.00.09.08n?
Use the following command to uninstall OpenSSL:
$ swremove OpenSSL
9 I have already got the supported version A.00.09.07l on my HP-UX system, and I am quite
happy with it. Why do I need to move to A.00.09.07m ?
This new version of OpenSSL contains several bug fixes, but most importantly, it has a few
critical fixes that have been well publicized at the OpenSSL site. HP recommends that you
upgrade to OpenSSL A.00.09.07m even if you are not affected by these defects.
10 If I do move my existing applications to this new version, will I need to rebuild the
application? Do you guarantee binary compatibility of my applications with this new version?
If you have built your application with either OpenSSL version A.00.09.07d, A.00.09.07e,
A.00.09.07i, or A.00.09.07l for a given operating system (HP-UX 11i v2 or HP-UX 11i v3), you
do not have to rebuild your application. HP does not guarantee binary compatibility of
applications built with any other version of OpenSSL.
11 I installed the HP-UX OpenSSL 0.9.7c version late in 2003, and it is still on my system. What
is the history (and support details) for that version of OpenSSL, and how does that compare
with OpenSSL A.00.09.07m and A.00.09.08n?
22 OpenSSL A.00.09.08n.010, A.00.09.08n.011, and A.00.09.08n.012