OpenSSL Release Notes (5900-1560, August 2011)

TIP: The most recent version of OpenSSL is available at: http://www.software.hp.com
Learning about OpenSSL technology
A large volume of information exists on the Internet about OpenSSL technology. HP recommends
that you learn more about OpenSSL by reading O'Reilly's book Network Security with OpenSSL:
Cryptography for Secure Communications by John Viega, Matt Messier, and Pravir Chandra. You
can order this book from http://www.oreilly.com/
You can also learn about the OpenSSL technology at the following links:
• OpenSSL Website at: http://www.openssl.org/
• OpenSSL FAQ at: http://www.openssl.org/support/faq.html
• OpenSSL mailing list at: http://marc.theaimsgroup.com/?l=openssl-users
• The Transport Layer Security (TLS) Internet Engineering Task Force (IETF) Working Groups at:
http://www.ietf.org/html.charters/wg-dir.html#Security%20Area
• OpenSSL APIs at: http://www.opensslbook.com/api/index.html
OpenSSL A.00.09.08q.001, A.00.09.08q.002, and A.00.09.08q003 Release Notes is available
at the following locations:
• The HTML and pdf versions are available at: The Business Support Center
• A text version of the README.hp readme file in the /opt/openssl directory.
Frequently asked questions (FAQs)
Following are questions frequently asked about OpenSSL.
1 What does OpenSSL do? Why do I need it?
OpenSSL offers an advanced level of security using the SSL/TLS protocols. Client-server
applications that send and receive data over a network are open to a range of vulnerabilities.
They can use SSL/TLS to implement privacy (through encryption), tamper-proofing (through
message digests) and non-repudiation (through certificates and digital signatures).
2 What is the openssl command-line tool? Why do I need it?
The OpenSSL libraries (libssl and libcrypto - the 32 and 64-bit versions of the static
and shared libraries) define the OpenSSL product. The openssl command-line tool is an easy
way for you to quickly execute functions (for example, create certificates) without having to
write a new application for that purpose.
NOTE: The openssl command-line tool is a 32–bit application. It uses the 32–bit static
OpenSSL libraries.
3 There are several flavours of libraries available in OpenSSL A.00.09.07m and OpenSSL
A.00.09.08q. What are they? How do I know when to use which library?
Use the OpenSSL A.00.09.07m and OpenSSL A.00.09.08q libraries for 32-bit and 64-bit
applications. Both the 32-bit and 64-bit versions of the libraries are provided. For a list of all
the library files, see“OpenSSL libraries” (page 8). You can also choose to create user
applications using either a static library or a shared library. In addition, OpenSSL A.00.09.08q
contains libraries that support hardware ENGINES.
4 How do I switch between OpenSSL A.00.09.07m and OpenSSL A.00.09.08q?
During installation, the depot installs OpenSSL A.00.09.07m and OpenSSL A.00.09.08q in
the /opt/openssl/0.9.7 and /opt/openssl/0.9.8 directories, respectively. These
directories contain binaries, libraries, manpages, and other files specific to each version of
20 OpenSSL A.00.09.08q.001, A.00.09.08q.002, and A.00.09.08q.003