Re: [twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33

2016-09-08 Thread Angus Robertson - Magenta Systems Ltd
> I think you need to explicitly specify that you want to use older > version, because now you can just recompile application and > expect it to work with both old and new versions Only if you call OpenSSL APIs directly, all ICS SSL functions work safely with old and new versions. But I will

Re: [twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33

2016-09-07 Thread Eugene Kotlyarov
>> Could you also add some conditional define to hide functions that are >> gone I just accidentally noticed that EVP_CIPHER_CTX_init is gone when >> my application started crashing, it would be nice to fail at compile >> time. >Not easily, it would be needed if your application still used 1.0.

Re: [twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33

2016-09-07 Thread Angus Robertson - Magenta Systems Ltd
> Could you also add some conditional define to hide functions that > are gone > I just accidentally noticed that EVP_CIPHER_CTX_init is gone when > my application started crashing, it would be nice to fail at > compile time. Not easily, it would be needed if your application still used 1.0.2,

Re: [twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33

2016-09-07 Thread Eugene Kotlyarov
>> Could you also add GSSLEAY_DLL_IgnoreOld global variable similar to >> GSSLEAY_DLL_IgnoreNew, so we could ignore old dll names for security >> reasons. >This is now added to ICS V8.34. >Also corrected next OpenSSL release is 1.1.1 not 1.1.0a, so this build will >support up to 1.1.999. >Will

Re: [twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33

2016-09-07 Thread Angus Robertson - Magenta Systems Ltd
> Could you also add GSSLEAY_DLL_IgnoreOld global variable similar > to GSSLEAY_DLL_IgnoreNew, so we could ignore old dll names for > security reasons. This is now added to ICS V8.34. Also corrected next OpenSSL release is 1.1.1 not 1.1.0a, so this build will support up to 1.1.999. Will need

Re: [twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33

2016-08-29 Thread Angus Robertson - Magenta Systems Ltd
> Could you also add GSSLEAY_DLL_IgnoreOld global variable similar > to GSSLEAY_DLL_IgnoreNew, so we could ignore old dll names for > security reasons. Good idea, I'll do that next week. However OpenSSL 1.0.2 is the current recommended long term release and will get security patches for a few m

Re: [twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33

2016-08-29 Thread Eugene Kotlyarov
Systems Ltd Sent: August 29, 2016 9:20 AM To: twsocket@lists.elists.org Subject: [twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33 Our OpenSSL 1.1.0 DLLs are now available from the wiki page: http://wiki.overbyte.be/wiki/index.php/ICS_Download which needs ICS V8.33 from the same page or from

[twsocket] OpenSSL 1.1.0 is now supported by ICS V8.33

2016-08-29 Thread Angus Robertson - Magenta Systems Ltd
Our OpenSSL 1.1.0 DLLs are now available from the wiki page: http://wiki.overbyte.be/wiki/index.php/ICS_Download which needs ICS V8.33 from the same page or from SVN. There were a lot of SSL changes in V8.27 and since, please see the notes in wsocket. I'll post another message with more det