OpenSSL A.00.09.08za.001, A.00.09.08za.002, and A.00.09.08za.003 Release Notes (762808-002, June 2014)

1 OpenSSL A.00.09.08za.001, A.00.09.08za.002, and
A.00.09.08za.003
This document contains the most recent product information for OpenSSL A.00.09.08za.001,
A.00.09.08za.002, and A.00.09.08za.003 supported on HP-UX 11i v1, HP-UX 11i v2, and
HP-UX 11i v3, respectively. This document contains the following information:
• OpenSSL Features
• Installing OpenSSL
• Using the OpenSSL command-line Tool
• Frequently Asked Questions (FAQs)
Announcement
This version of OpenSSL is based on the open source OpenSSL 0.9.7m and 0.9.8za products.
This bundle contains the following:
• OpenSSL A.00.09.08za in the /opt/openssl/0.9.8 directory
• OpenSSL A.00.09.07m in the /opt/openssl/0.9.7 directory
• FIPS Capable OpenSSL (based on 0.9.7m and linked against FIPS 1.1.2 module) in the /opt/
openssl/fips/0.9.7 directory
FIPS Capable OpenSSL (based on 0.9.8za and linked against FIPS 1.2 module) in the /opt/
openssl/fips/0.9.8 directory.
The default version of OpenSSL that is enabled on HP-UX 11i v1 and HP-UX 11i v2 is OpenSSL
A.00.09.07m. The default version of OpenSSL on HP-UX 11i v3 is OpenSSL A.00.09.08za. Use
the /opt/openssl/switchversion.sh script to switch between OpenSSL A.00.09.07x and
OpenSSL A.00.09.08za. You can also use this script to swap the openssl.cnf file, depending
on the version of OpenSSL. However, this is an optional step.
OpenSSL A.00.09.07m and A.00.09.08za offer a general-purpose cryptography library and
implementation of the Secure Sockets Layer (SSL V2/V3) and Transport Layer Security (TLS V1)
protocols. OpenSSL A.00.09.07m and A.00.09.08za are fully tested and supported on the HP-UX
operating system.
OpenSSL A.00.09.07m and A.00.09.08za are upgrades for HP-UX OpenSSL Versions
A.00.09.07l, and A.00.09.08o.
OpenSSL A.00.09.07m and A.00.09.08za are available as Web upgrades. The software bits
are available at: http://www.software.hp.com.
Install the appropriate OpenSSL depot version, based on your operating system. Table 1 lists the
OpenSSL releases available for HP–UX 11i v1, HP–UX 11i v2, and HP-UX 11i v3.
Table 1 Default OpenSSL depot versions for HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3
OpenSSL depot versionSupported operating systems
OpenSSL A.00.09.08za.001HP-UX 11i v1
OpenSSL A.00.09.08za.002HP-UX 11i v2
OpenSSL A.00.09.08za.003HP-UX 11i v3
OpenSSL A.00.09.07m has the following options:
./Configure threads zlib shared no-rc5 no-idea no-krb5 no-mdc2
--openssldir=/opt/openssl hpux-cc
OpenSSL A.00.09.08za has the following options:
Announcement 5