problem with cli.ccp - serv.cpp

[Riccardo Alessiani]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Hi!!

 

I have install the packet "openssl-0.9.2b" whit the following commands:

 

./config

make && make install

 

1) Now...How can i install the applications located in /open-0.9.2.b/demos/ssl/cli.cpp and /open-0.9.2.b/demos/ssl/serv.cpp ( I use Fedora 5) ?

 

2) How can i use this applications?

 

Thanks....

 

Riccardo.

[wolfoftheair]

First: This is something to go to openssl-users, not openssl-dev.
(You are attempting to use the library, not develop inside the
library.)

Next: Why on earth are you using such an outdated version?  The
supported versions are 0.9.7m and 0.9.8g.  0.9.2b is from 1999, and
there have been 8 years of continued development on them.

-Kyle H

On Tue, May 13, 2008 at 1:08 PM, Riccardo Alessiani
<r.alessiani@...> wrote:

>
>
> Hi!!
>
> I have install the packet "openssl-0.9.2b" whit the following commands:
>
> ./config
> make && make install
>
> 1) Now...How can i install the applications located in
> /open-0.9.2.b/demos/ssl/cli.cpp and /open-0.9.2.b/demos/ssl/serv.cpp ( I use
> Fedora 5) ?
>
> 2) How can i use this applications?
>
> Thanks....
>
> Riccardo.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...

[Rodney Thayer]

Kyle Hamilton wrote:
> First: This is something to go to openssl-users, not openssl-dev.
> (You are attempting to use the library, not develop inside the
> library.)
>
> Next: Why on earth are you using such an outdated version?  The
> supported versions are 0.9.7m and 0.9.8g.  0.9.2b is from 1999, and
> there have been 8 years of continued development on them.

There are products in production networks now that have old
version of OpenSSL.  Vendors typically react poorly, in my experience,
to suggestions they should update to, oh, say, the most recent
version as recommended by the OpenSSL team ;-)

So, yeah, this was off-topic, but unfortunately you should not
assume this person is running an old system - they could have
received 0.9.2b from some vendor just recently.

Apparently it hasn't occured to some vendors that the vulnerabilities
the OpenSSL team repair might actually affect real products in the
field.  And THAT is a development issue.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...

[Gilles Espinasse]

----- Original Message -----
From: "Rodney Thayer" <rodney@...>
To: <openssl-dev@...>
Sent: Wednesday, May 14, 2008 7:13 PM
Subject: Re: problem with cli.ccp - serv.cpp

> Kyle Hamilton wrote:
> > First: This is something to go to openssl-users, not openssl-dev.
> > (You are attempting to use the library, not develop inside the
> > library.)
> >
> > Next: Why on earth are you using such an outdated version?  The
> > supported versions are 0.9.7m and 0.9.8g.  0.9.2b is from 1999, and
> > there have been 8 years of continued development on them.
>
> There are products in production networks now that have old
> version of OpenSSL.  Vendors typically react poorly, in my experience,
> to suggestions they should update to, oh, say, the most recent
> version as recommended by the OpenSSL team ;-)
>

That was not the advice given.
openssl-0.9.7 release date is Dec 31 01:06:14 2002
And 0.9.7 branch is still maintained.

> So, yeah, this was off-topic, but unfortunately you should not
> assume this person is running an old system - they could have
> received 0.9.2b from some vendor just recently.
>
Unlikely unless it is a couple of braindead vendor/buyer so nobody has to
care that they are more than 5 years late. Who is still installing an rh7.2
system today except for archeological purpose?

Nobody could blame the openssl team for the long term support for free.
Unfortunately still supporting a version 5 years after the release is not so
frequent (for good or bad reasons).

Gilles

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...