Tag Archives: Fix

Release of OpenSSL v0.9.8t and v1.0.0g

Posted on by
3

Just a few weeks after the last release the OpenSSL team released important updates to fix issues in both source branches. Again…

Direct links for the updated versions:
http://indy.fulgan.com/SSL/openssl-0.9.8t-i386-win32.zip
http://indy.fulgan.com/SSL/openssl-0.9.8t-x64_86-win64.zip
http://indy.fulgan.com/SSL/openssl-1.0.0g-i386-win32.zip
http://indy.fulgan.com/SSL/openssl-1.0.0g-x64_86-win64.zip

The update fixes a possible DTLS DoS attack. This is related to encrypted Datagrams, e.g. encrypted VoIP or Audio/Video Streams (and encrypted UDP in general).

- Arvid

P.S.: Update has been on the server for a few days, forget to publish this post. Sorry about.

Release of OpenSSL v0.9.8s and v1.0.0f

Posted on by
Reply

The OpenSSL team released important updates to both source branches. As usual I prepared updated, precompiled and tested libraries for your convenience.

Direct links for the updated versions:
http://indy.fulgan.com/SSL/openssl-0.9.8s-i386-win32.zip
http://indy.fulgan.com/SSL/openssl-0.9.8s-x64_86-win64.zip
http://indy.fulgan.com/SSL/openssl-1.0.0f-i386-win32.zip
http://indy.fulgan.com/SSL/openssl-1.0.0f-x64_86-win64.zip

Those updates include important Bug and Security Fixes, updating is recommended.

- Arvid

Rerelease of OpenSSL v0.9.8r and v1.0.0d for Indy

Posted on by
9

Hello,

after some weeks of extensive testing I am now releasing updated versions of the above mentioned OpenSSL DLLs. Those libraries are now tested with Windows 2000 up to Windows 7 (x32 and x64 where available). As usual there are no dependencies to any runtime libraries beside the common Kernel/WinSock2 etc.pp.

As I mentioned in the Important Compatibility Announcement two weeks ago I had made a mistake during the compilation of the last two published OpenSSL versions which led to an incompatibility with Windows 2000 and early XP versions. Check the linked post for a list of affected versions.

The issue is now fixed.

Here are the direct links for the updated release for Win32/64:
http://indy.fulgan.com/SSL/openssl-0.9.8r-i386-win32-rev2.zip
http://indy.fulgan.com/SSL/openssl-1.0.0d-i386-win32-rev2.zip
http://indy.fulgan.com/SSL/openssl-0.9.8r-x64_86-win64-rev2.zip
http://indy.fulgan.com/SSL/openssl-1.0.0d-x64_86-win64-rev2.zip

I am sorry for the inconvenience caused and I would like to thank Jason Smith again for bringing this issue to my attention and Salvor Hardin for his help!

As Salvor stated in one of his comments using Visual C++ 2008 with an adjusted makefile works (the /MT switch as mentioned in the previous post). We should keep in mind that this way of building the DLLs may not work in future but for now and the next few years it should do the trick. To make it short – @Savlor: You were right!

Cheers,
Arvid

OpenSSL v0.9.8m for Indy

Posted on by
9

Hi,

I just prepared and published an updated precompiled version of the OpenSSL libraries. As always they are available on the official Indy Mirror, the Fulgan Mirror.

Direct Link: openssl-0.9.8m-i386-win32.zip

You’ll find a ReadMe, License Information and File Hashes inside the zip archive. This version is including important bug and security fixes, using it is strongly recommended.

Regards,
Arvid

OpenSSL v0.9.8l for Indy

Posted on by
6

Hi,

I just published an updated pre-compiled version of the OpenSSL libraries. They are available at the Fulgan Mirror.

Direct Link: openssl-0.9.8l-i386-win32.zip

You’ll find the ReadMe, License Information and File Hashes inside the zip.

This release takes care of the discovered TLS re-negotiation issue (currently by disabling re-negotiation). If you run into troubles be sure to check the OpenSSL page for hints too. It is recommended to use this version immediately.

Regards,
Arvid