RE: Most Current Cipher List for 4D and questions regarding OpenSSL versions being used

2016-12-05 Thread Michael McCall
ech@lists.4d.com> Subject: RE: Most Current Cipher List for 4D and questions regarding OpenSSL versions being used Mike, v15.2 used OpenSSL 1.0.1p v15.3 was updated to OpenSSL 1.0.2j as described in the release notes: http://download.4d.com/Documents/Products_Documentation/LastVersions/Line_15

RE: Most Current Cipher List for 4D and questions regarding OpenSSL versions being used

2016-12-05 Thread Timothy Penner
Mike, v15.2 used OpenSSL 1.0.1p v15.3 was updated to OpenSSL 1.0.2j as described in the release notes: http://download.4d.com/Documents/Products_Documentation/LastVersions/Line_15/VIntl/4D_v15_3_ReleaseNotes_US.pdf For a cipher list, I like to check https://cipherli.st/ * then click on the

Re: Most Current Cipher List for 4D and questions regarding OpenSSL versions being used

2016-12-05 Thread Spencer Hinsdale
it is the timing - 15.3 is from 11/17/16 - OpenSSL is from 9/26/16 - R5 is from 9/14/16 > On Dec 5, 2016, at 4:10 PM, Michael McCall wrote: > > Thanks Tai, > > I took your suggestion and checked the version of the ssleay32.dll which came > with v15 r5 and it only

RE: Most Current Cipher List for 4D and questions regarding OpenSSL versions being used

2016-12-05 Thread Michael McCall
:56 PM To: 4D iNug Technical <4d_tech@lists.4d.com> Subject: RE: Most Current Cipher List for 4D Hi, I'm not 100% certain, but I believe that it was due to the timings when building them. Actually v15.3 is 1.0.2j, while the v15.2 I have at hand is 1.0.1p. 15.3 was probably and built when

RE: Most Current Cipher List for 4D

2016-12-05 Thread Tai Bui
Hi, I'm not 100% certain, but I believe that it was due to the timings when building them. Actually v15.3 is 1.0.2j, while the v15.2 I have at hand is 1.0.1p. 15.3 was probably and built when 1.0.2j was available while 16 Beta was probably built with the 1.0.2h. Makes sense in terms of

RE: Most Current Cipher List for 4D

2016-12-05 Thread Tai Bui
Hi Mike, You can actually manually check the version of OpenSSL used in 4D yourself: http://kb.4d.com/assetid=76175 Checking myself Keisuke Miyako's post appears to be accurate. Hope this helps. Best Regards, -Tai B. ** 4D

RE: Most Current Cipher List for 4D

2016-12-05 Thread Michael McCall
- From: 4D_Tech [mailto:4d_tech-boun...@lists.4d.com] On Behalf Of Keisuke Miyako Sent: Monday, December 5, 2016 12:02 PM To: 4D iNug Technical <4d_tech@lists.4d.com> Subject: Re: Most Current Cipher List for 4D you just need to know which version of OpenSSL is used in which version

Re: Most Current Cipher List for 4D

2016-12-05 Thread Keisuke Miyako
you just need to know which version of OpenSSL is used in which version of 4D. 1.0.2h in v16 1.0.2j in v15 1.0.1p in v14 1.0.1l in v13 > 2016/12/06 4:43、Michael McCall のメール: > > Does anyone know? > > 1) if the list of Ciphers provided in tech note 10-07 is still the

Re: Most Current Cipher List for 4D

2016-12-05 Thread Spencer Hinsdale
I think there is a cipher list option with Get Database Parameter. And I think 4D uses OpenSSL and that 15.3 (not R that you are running) updates this (to 1.0.x "J" or some such). Sorry to be vague and unable to lookup right now but maybe this give a few ideas of where to start... > On Dec

Most Current Cipher List for 4D

2016-12-05 Thread Michael McCall
I have a government client using our 4D OEM Web Server application. Their security team would like to customize the cipher list used by 4D. We provide the ability for clients to do that using our application. They however have asked for the following information. 1. A complete list of the