Do we know that the OP's only interest is in updating (unnecessarily, it would 
appear) the IBM Tools that use OpenSSL internally? Kirk and Walt seem to assume 
so.

I OTOH (and perhaps David?) made the assumption -- perhaps incorrectly -- that 
he had an interest in using the OpenSSL library as part of some other project.

I don't see an indication either way in the OP.

Charles

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Kirk Wolf
Sent: Sunday, June 21, 2015 10:33 AM
To: [email protected]
Subject: Re: OpenSSL for z/OS

Walt,

You are correct.  IBM Ported Tools OpenSSH includes *some* of the crypto 
algorithms (ciphers, MACs, and RSA, DSA, and EC-DSA key operations) from
OpenSSL.   But OpenSSH doesn't use SSL (at all), so the issues that we have
seen with OpenSSL do not apply.

Also, IBM Ported Tools OpenSSH uses ICSF for selected (and commonly used) 
crypto algorithms, bypassing OpenSSL altogether.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to