On Sat, 20 Jun 2015 22:58:52 -0500, Anthony Fletcher <[email protected]> wrote:
>Does anyone know where an up to date verson of OpenSSL that will run on z/OS >can be found. The version shipped in IBM Ported Tools is not current. I >understand that at least version 1.0.1n is needed to address the POODLE and >other exposures. It is my impression (possibly incorrect, I suppose) that the IBM Ported Tools implementation of OpenSSL is buried internally such that it is usable only by components of IBM Ported Tools itself, not by customer applications directly. Further, I believe that the functions of OpenSSL used by the components of IBM Ported Tools do not have POODLE and the other known exposures. If OpenSSL as used by IBM Ported Tools does have any of those exposures then IBM would release Security or Integrity PTFs to fix them. Therefore, I do not think you need to worry about updating it. -- Walt ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
