OpenSSL v1.0.0 for Indy

Hello,

after one year of beta testing, the OpenSSL team published the final 1.0 version yesterday. As of today you can download a precompiled version of the OpenSSL libaries from our official Indy Mirror (The Fulgan Mirror).

Direct Link: openssl-1.0.0-i386-win32.zip

As always: You’ll find a ReadMe, License Information and File Hashes inside the zip archive. This version is including important bug and security fixes, using it is strongly recommended.

Note: This version needs the very latest Indy SVN (Revision #4168 and newer). This is due to changes in OpenSSL (i.e. removing deprecated MD2 by default).

I would like to thank my previous readers, especially Salvor for pointing out a different way in building the libraries without the need for the MS VC++ Runtime DLLs while being able to use the latest VC++ compilers.

This release is built using MS VC++ 2008 and the Network Wide Assembler (NASM) instead of Mingw/gcc which allows us to create smaller DLLs and faster code now (sadly the VC++ 2010 build chain is still broken for OpenSSL 1.0).

Regards,
Arvid

OpenSSL v0.9.8m for Indy

Hi,

I just prepared and published an updated precompiled version of the OpenSSL libraries. As always they are available on the official Indy Mirror, the Fulgan Mirror.

Direct Link: openssl-0.9.8m-i386-win32.zip

You’ll find a ReadMe, License Information and File Hashes inside the zip archive. This version is including important bug and security fixes, using it is strongly recommended.

Regards,
Arvid

Thoughts about FIPS Support in Indy

Hi,

I recently had a talk with JP Mugaas about whether we should include FIPS support of OpenSSL in Indy and to what extend this will be useful for our users (especially those in the United States).

We agreed that many users would benefit from the possibility to write FIPS compliant applications. However as you know providing support for it can only be part of your certification process. On the other hand: Even if you or your company don’t decide to get a certification on your own it would be still an advantage to be able to write at least FIPS compliant applications.

What do you think about? Would that be of interest to you?

Feel free to add your comments about. Currently we are only planning…

Regards,
Arvid

OpenSSL v0.9.8l for Indy

Hi,

I just published an updated pre-compiled version of the OpenSSL libraries. They are available at the Fulgan Mirror.

Direct Link: openssl-0.9.8l-i386-win32.zip

You’ll find the ReadMe, License Information and File Hashes inside the zip.

This release takes care of the discovered TLS re-negotiation issue (currently by disabling re-negotiation). If you run into troubles be sure to check the OpenSSL page for hints too. It is recommended to use this version immediately.

Regards,
Arvid