When do you plan on upgrading to a safer SSL? - Reseller Hosting, Shared Hosting, Dedicated Hosting by Vortech Inc.

***somereseller*** · #1 02-21-2003, 07:05 PM

We're still running the unsecure 0.9.6g on freeBSD.

***admin*** · #2 02-21-2003, 11:37 PM

What are you talking about?

***somereseller*** · #3 02-22-2003, 07:09 AM

A swiss security lab has shown that it was possible to monitor an SSL connection and get passwords.

This affects all OpenSSL versions prior to 0.9.6i or 0.9.7a

It's on all serious security lists.

So right now, SSL is useless to protect anything but one time credit card transactions.

***admin*** · #4 02-22-2003, 07:30 AM

Damn swiss..

***somereseller*** · #5 02-22-2003, 11:29 AM

Hehe

***admin*** · #6 02-22-2003, 12:34 PM

I will have the unix admin's check it out.. What version did they say was good any?

***Brangwyn*** · #7 02-22-2003, 07:41 PM

http://www.cert.org/advisories/CA-2002-23.html is the latest OpenSSL Advisory.

***somereseller*** · #8 02-23-2003, 09:45 AM

That advisory is an old one.

Here is the official one from OpenSSL
http://www.openssl.org/news/secadv_20030219.txt

***Brangwyn*** · #9 02-23-2003, 06:36 PM

That was the latest I coud find on CERT, oh well still needs to be patched

***admin*** · #10 02-23-2003, 07:13 PM

Looks like Psoft is going to have to do this. They have there own installed something custom so we don't want to go and mess it up. If someone wants they can post it on there site so they can get it fixed.

***somereseller*** · #11 02-26-2003, 07:23 PM

THe new files are here
http://www.psoft.net/shiv/files/packages.html

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Any chance of upgrading PERL?	AgentHi5	Chit Chat Public	1	01-22-2004 04:40 AM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)