OpenSSL A.00.09.08za.001, A.00.09.08za.002, and A.00.09.08za.003 Release Notes (762808-002, June 2014)

2.9 I have already got the supported version A.00.09.07l on my HP-UX system, and I am quite
happy with it. Why do I need to move to OpenSSL A.00.09.08za?
This new version of OpenSSL contains several bug fixes, but most importantly, it has a few
critical fixes that have been well publicized at the OpenSSL site. HP recommends that you
upgrade to OpenSSL A.00.09.08za even if you are not affected by these defects.
2.10 If I do move my existing applications to this new version, will I need to rebuild the
application? Do you guarantee binary compatibility of my applications with this new version?
If you have built your application with either OpenSSL version A.00.09.07d, A.00.09.07e,
A.00.09.07i, or A.00.09.07l for a given operating system (HP-UX 11i v2 or HP-UX 11i
v3), you do not have to rebuild your application. HP does not guarantee binary compatibility
of applications built with any other version of OpenSSL.
2.11 I installed the HP-UX OpenSSL 0.9.7c version late in 2003, and it is still on my system.
What is the history (and support details) for that version of OpenSSL, and how does that
compare with OpenSSL A.00.09.07m and A.00.09.08za?
OpenSSL A.00.09.07m and A.00.09.08za contain a precompiled version of the OpenSSL
Open Source versions 0.9.7m and A.09.08j. Additionally, OpenSSL A.00.09.07m and
A.00.09.08za contain the prngd random number generator and a self-signed host
certificate. OpenSSL A.00.09.07m and A.00.09.08za are built to install and uninstall using
the SD-UX utility, and is only for customers using the HP-UX operating system. HP offers full
support for OpenSSL A.00.09.07m and A.00.09.08za.
The Internet Express OpenSSL 0.9.7c product is an older version, and contains a precompiled
version of the OpenSSL Open Source version 0.9.7c. It is also built to install and uninstall
using the SD-UX utility, and is meant for customers using the HP-UX operating system.
However, HP does not offer support for Internet Express OpenSSL 0.9.7c. This version is
the last Internet Express version of OpenSSL released
2.12 How many fully supported releases of OpenSSL have been done on HP-UX so far?
Apart from this version of OpenSSL, HP fully supports the following versions of OpenSSL:
• OpenSSL A.00.09.07d (based on OpenSSL Open Source version 0.9.7d)
• OpenSSL A.00.09.07e (based on OpenSSL Open Source version 0.9.7e)
• OpenSSL A.00.09.07i (based on OpenSSL Open Source version 0.9.7i)
• OpenSSL A.00.09.07l (based on OpenSSL Open Source version 0.9.7l)
A few patch updates are available for these releases of OpenSSL. A patch release typically
has the same base version number (for example, A.00.09.07m) with a patch number
appended to it (for example, A.00.09.07m.009).
2.13 I have HP-UX Internet Express OpenSSL 0.9.7c installed on my system. Will installing
OpenSSL A.00.09.07m and A.00.09.08za automatically uninstall HP-UX Internet Express
OpenSSL 0.9.7c?
No. The HP-UX Internet Express OpenSSL 0.9.7c and OpenSSL A.00.09.07m and
A.00.09.08za product depots have a conflict with the product and bundle names. If you
have the HP-UX Internet Express OpenSSL product installed and want to upgrade to OpenSSL
A.00.09.07m or A.00.09.08za, you must first uninstall the HP-UX Internet Express OpenSSL
product. If you attempt to install OpenSSL A.00.09.07m or A.00.09.08za on a system
without removing the HP-UX Internet Express OpenSSL product, the OpenSSL A.00.09.07m
and A.00.09.08za installation fails with an error message. If you have HP-UX Internet
Express OpenSSL 0.9.7c installed on your system, use the following command to remove
it:
# swremove ixOpenSSL
2.14 I have already built Open Source OpenSSL 0.9.7m or A.0.9.8g by downloading the source
code directly from http://www.openssl.org. Now I want to upgrade to OpenSSL
25