OpenSSL Release Notes (5900-1560, August 2011)

OpenSSL. The /opt/openssl/switchversion.sh script switches between these two
versions. To change the version of OpenSSL, execute the script as follows:
# /opt/openssl/switchversion.sh
You can also choose to switch the openssl.cnf file based on the version of OpenSSL.
However this is not necessary.
5 How does the performance of OpenSSL A.00.09.08q compare to the Open Source version
0.9.7m or 0.9.8g respectively?
The two products have the same base source code. There is no difference in performance,
other conditions remaining the same. However, the performance of several openssl library
functions is dictated by the random number generator on the system. The /dev/urandom
and /dev/random devices perform better than prngd. You can download /dev/random
at:
http://software.hp.com
6 Does installing OpenSSL require a kernel rebuild?
No. OpenSSL contains application libraries and a command-line tool. It does not require a
kernel rebuild or system reboot.
7 How can I install OpenSSL A.00.09.07m or A.00.09.08q?
You can install OpenSSL A.00.09.07m or A.00.09.08q from the application CD or the Web
using the swinstall command.
8 How can I uninstall OpenSSL A.00.09.07m or A.00.09.08q?
Use the following command to uninstall OpenSSL:
# swremove OpenSSL
9 I have already got the supported version A.00.09.07l on my HP-UX system, and I am quite
happy with it. Why do I need to move to OpenSSL A.00.09.08q?
This new version of OpenSSL contains several bug fixes, but most importantly, it has a few
critical fixes that have been well publicized at the OpenSSL site. HP recommends that you
upgrade to OpenSSL A.00.09.08q even if you are not affected by these defects.
10 If I do move my existing applications to this new version, will I need to rebuild the application?
Do you guarantee binary compatibility of my applications with this new version?
If you have built your application with either OpenSSL version A.00.09.07d, A.00.09.07e,
A.00.09.07i, or A.00.09.07l for a given operating system (HP-UX 11i V2 or HP-UX 11i V3),
you do not have to rebuild your application. HP does not guarantee binary compatibility of
applications built with any other version of OpenSSL.
11 I installed the HP-UX OpenSSL 0.9.7c version late in 2003, and it is still on my system. What
is the history (and support details) for that version of OpenSSL, and how does that compare
with OpenSSL A.00.09.07m and A.00.09.08q?
OpenSSL A.00.09.07m and A.00.09.08q contain a precompiled version of the OpenSSL
Open Source versions 0.9.7m and A.09.08j. Additionally, OpenSSL A.00.09.07m and
A.00.09.08q contain the prngd random number generator and a self-signed host certificate.
OpenSSL A.00.09.07m and A.00.09.08q are built to install and uninstall using the SD-UX
utility, and is only for customers using the HP-UX operating system. HP offers full support for
OpenSSL A.00.09.07m and A.00.09.08.
The Internet Express OpenSSL 0.9.7c product is an older version, and contains a precompiled
version of the OpenSSL Open Source version 0.9.7c. It is also built to install and uninstall
using the SD-UX utility, and is meant for customers using the HP-UX operating system. However,
HP does not offer support for Internet Express OpenSSL 0.9.7c. This version is the last Internet
Express version of OpenSSL released
12 How many fully supported releases of OpenSSL have been done on HP-UX so far?
Apart from this version of OpenSSL, HP fully supports the following versions of OpenSSL:
Frequently asked questions (FAQs) 21