OpenSSL v1.0.0 for Indy

Hello,

after one year of beta testing, the OpenSSL team published the final 1.0 version yesterday. As of today you can download a precompiled version of the OpenSSL libaries from our official Indy Mirror (The Fulgan Mirror).

Direct Link: openssl-1.0.0-i386-win32.zip

As always: You’ll find a ReadMe, License Information and File Hashes inside the zip archive. This version is including important bug and security fixes, using it is strongly recommended.

Note: This version needs the very latest Indy SVN (Revision #4168 and newer). This is due to changes in OpenSSL (i.e. removing deprecated MD2 by default).

I would like to thank my previous readers, especially Salvor for pointing out a different way in building the libraries without the need for the MS VC++ Runtime DLLs while being able to use the latest VC++ compilers.

This release is built using MS VC++ 2008 and the Network Wide Assembler (NASM) instead of Mingw/gcc which allows us to create smaller DLLs and faster code now (sadly the VC++ 2010 build chain is still broken for OpenSSL 1.0).

Regards,
Arvid

OpenSSL v0.9.8m for Indy

Hi,

I just prepared and published an updated precompiled version of the OpenSSL libraries. As always they are available on the official Indy Mirror, the Fulgan Mirror.

Direct Link: openssl-0.9.8m-i386-win32.zip

You’ll find a ReadMe, License Information and File Hashes inside the zip archive. This version is including important bug and security fixes, using it is strongly recommended.

Regards,
Arvid

Thoughts about FIPS Support in Indy

Hi,

I recently had a talk with JP Mugaas about whether we should include FIPS support of OpenSSL in Indy and to what extend this will be useful for our users (especially those in the United States).

We agreed that many users would benefit from the possibility to write FIPS compliant applications. However as you know providing support for it can only be part of your certification process. On the other hand: Even if you or your company don’t decide to get a certification on your own it would be still an advantage to be able to write at least FIPS compliant applications.

What do you think about? Would that be of interest to you?

Feel free to add your comments about. Currently we are only planning…

Regards,
Arvid

OpenSSL v0.9.8l for Indy

Hi,

I just published an updated pre-compiled version of the OpenSSL libraries. They are available at the Fulgan Mirror.

Direct Link: openssl-0.9.8l-i386-win32.zip

You’ll find the ReadMe, License Information and File Hashes inside the zip.

This release takes care of the discovered TLS re-negotiation issue (currently by disabling re-negotiation). If you run into troubles be sure to check the OpenSSL page for hints too. It is recommended to use this version immediately.

Regards,
Arvid

Indy SVN Access

Hi,

we recently had a change to the Indy SVN server.

New locations are:
https://svn.atozed.com:444/svn/Indy9/
https://svn.atozed.com:444/svn/Indy10/
https://svn.atozed.com:444/svn/Indy10Demos/

The public user is now:
Username: Indy-Public-RO
(No password)

Note: The server uses a self-signed SSL certificate. Please trust it as it is needed to get access to the svn.

The usage of the svn moniker (svn://) is not supported anymore but the new server provides both SVN client and web access.

Please use your svn client’s relocation feature in order to move to the new location.

As always the current development is done in the Tiburon Branch (which will be merged at some later stage).

The official Fulgan Mirror is already updated to provide new daily snapshots again. For download instructions related to the mirror read the text at the bottom of this post: http://blog.digivendo.com/2008/09/where-to-get-the-current-indy-version/.

Sorry for inconvenience, but the new setup allows easier maintenance.

Cheers,
Arvid