Archive: DISK$PUBLIC:[ANONYMOUS.WASD]sesola20141113.zip;1 WASD VMS Web Services, Copyright (C) 1996-2014 Mark G.Daniel. This package (all associated programs), comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under the conditions of the GNU GENERAL PUBLIC LICENSE, version 3, or any later version. http://www.gnu.org/licenses/gpl.txt * Secure Sockets Layer (SSL) update for v10.0.3 thru 10.2.1. This package contains source code back-ported from v10.3.0. Corrects (bug-fixes) and refines SSL version configuration. Server version will show "HTTPd-WASD/10.n.n OpenVMS/ SSL/141113" * WASD SSL no longer supports SSLv2 or SSLv3 by default. TLSv1, TLSv1.1 and TLSv1.2 are now the default protocols. Supported protocols: SSLv2, SSLv3, TLSv1, TLSv1.1, TLSv1.2 * Command-line /SSL=2, /SSL=3 and /SSL=23 obsolete (and will need to be modified /SSL=SSLv2, /SSL=SSLv3 and /SSL=SSLv2v3) * CHECK YOUR SITE'S SSL SERVICES CAREFULLY AFTER UPDATE! Some configuration changes may be required. For example, if currently it is explicitly configured for SSLv2 and SSLv3 you should consider removing this and allowing only the (now) default TLS protocols (post-POODLE this is considered best-practice). * THIS IS SOURCE CODE and so during the @UPDATE SSL procedure the COMPILE option must be select. Tested with v10.0.3, v10.1.1 and v10.2.1. In any case YMMV (Your Millage May Vary - use at your own risk). * When linking against HP SSL V1.4 or earlier, earlier OpenSSL and on VAX the following link errors may be safely ignored ... %LINK-W-NUDFSYMS, 2 undefined symbols: %LINK-I-UDFSYM, TLSV1_1_METHOD %LINK-I-UDFSYM, TLSV1_2_METHOD (and consequently TLSv1.1 and TLSv1.2 are unavailable) * To install files: $ SET DEFAULT WASD_ROOT:[000000] $ UNZIP device:[dir]SESOLA20141113.ZIP" * To build the image use (and select the COMPILE option): $ @WASD_ROOT:[000000]UPDATE SSL VMS file attributes saved ... use UnZip 5.2+ on OpenVMS Archive created 13-NOV-2014 Length Date Time Name --------- ---------- ----- ---- 137229 11-13-2014 11:59 SRC/HTTPD/sesola.c 13068 11-04-2014 10:04 SRC/HTTPD/sesola.h --------- ------- 150297 2 files