Thanks Richard, Bill and et. I didn't see a straight forward document saying if the prototypes or structures changed in 0.9.8a, but part of the reason to do the update (besides security issues) was that I am starting on a new project that requires the EVP_SHA256 function and when I first compiled my new project under the current 0.9.7c environment, it lacked this function. So I got the new 0.9.7i and 0.9.8a and the web site said that 0.9.7i was a compatibility fix. I figured that implied that 0.9.8a was no 100% compatible.
I also figured this was probably mostly true if you were using static libraries, not DLLS. I wouldn't had presume the functional prototyping would had been changed for DLL interfacing. I did notice 0.9.7i introduced the EVP_SHA256 function, but it must of required a DEFINE to import it since the new project fail to compile the first time. Simply changing my INCLUDE statement to point to the newly compiled 0.9.8a successfully compiled it. If 0.9.7i has succeed, I would probably stick with this for now. Hence why I ask the question. Since we need to go with the 0.9.8a for the SHA256 stuff anyway, I'm not going to begin distributing two sets of dlls, I will go ahead and recompile all our applications as well around the latest 0.9.8i. :-) Thanks again. -- Hector ----- Original Message ----- From: <openssl-users@openssl.org> > The 0.9.8 are likely to be binary-incompatible with your modssl compiled for > 0.9.7. Stay with 0.9.7 until you update your mod_ssl.so module! They must > stay in-sync. > > > It really depends on what your application uses the libraries for. > > There are some fundamental changes in some parts of the libraries > > between the 0.9.7 and the 0.9.8 series, so to be on the safe side, I'd > > recommend you to recompile your applications for 0.9.8a. > > Also keep in mind when building httpd that if you are compiling in with > php, perl, or openldap, they must all be binding to the same openssl binary. > If you load mod_php, mod_perl, and mod_authnz_ldap built against openldap > (ssl-enabled) you are loading these bindings on the fly, and if one has > been built against a different openssl, things will come crashing down > around you (if they load at all.) > > Bill > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]