Last Update: 31-MAY-2017
Operating System: OpenVMS, Linux, Solaris
Component: PMDF Shared Library, SMTP
Base Level Required: PMDF V6.6
Other Requirements: None
Platform Subdirectory File(s) to download
-------- ------------ --------------------
OpenVMS Alpha vms pmdf066-openssl-1-0-2l-alpha.zip
OpenVMS I64 vms pmdf066-openssl-1-0-2l-i64.zip
Linux linux pmdf66-linux-openssl-1.0.2g.zip
openssl-1-0-2l-linux.zip
Solaris SPARC solaris-sparc pmdf66-sparc-openssl-1.0.2g.tar.gz
openssl-1.0.2l-sparc.tar.gz
General info
------------
Note: To install the OpenSSL 1.0.2l update on Linux and Solaris,
you must have installed the 1.0.2g kit first, as it includes
additional images required for the upgrade. The 1.0.2l kit only
includes new libcrypto and libssl libraries.
You will need to have a License PAK with a release date after the date of
PMDFSHR.EXE or libpmdf.so to run PMDF. Note that this may apply to other
images as well.
Patches may be obtained from the anonymous FTP account on
ftp.pmdf.process.com. Use FTP to connect to the host ftp.pmdf.process.com
and login as the user anonymous. Use your e-mail address as the login
password.
Move to the pmdf_66_patches subdirectory:
ftp> cd pmdf_66_patches
Patches will be located in platform-specific sub-trees, as follows:
Platform Subdirectory
-------- ------------
OpenVMS vms
Linux linux
Solaris/SPARC solaris-sparc
When FTPing images, be sure to FTP them as binary. Before retrieving
such an image with the GET command, be sure to put your FTP into binary
mode with a command such as TYPE IMAGE or TYPE BINARY.
Change history
--------------
26-MAY-2017
This update includes an upgrade to OpenSSL 1.0.2l.
24-SEP-2016
This update includes an upgrade to OpenSSL 1.0.2i.
11-MAY-2016
This update includes an upgrade to OpenSSL 1.0.2h.
21-APR-2016
This update corrects the following problems:
o LDAP over TLS was inadvertently broken by the first release.
o IMAP and POP3 connections were getting closed every 30 seconds
or so, resulting in numerous "deadstream" entries in the
connection.log file. The problem wasn't noticeable by users, but
it did result in additional unnecessary overhead as clients were
forced to reconnect more often than they were supposed to.
o TLS was not used for outgoing SMTP connections in cases when it
should have been.
o For Linux and Solaris, a long-standing problem with some email
entries not getting added to the queue cache database in a timely
fashion from time to time has been resolved.
o For Linux and Solaris, new pine images are provided to correct
a problem introduced by the first release of this OpenSSL patch.
8-MAR-2016
PMDF now uses OpenSSL 1.0.2g, an upgrade from 0.9.8. New versions
of PMDFSHR (libpmdf), as well as the tcp_smtp_* and the tcp_* images
are included. Also included is a new version of dispatcher that
allows for larger mappings files.
Installation
------------
VMS
Before installing a new PMDFSHR, issue the following command:
$ pmdf shutdown
Failure to issue the above command could result in the current
processes not recognizing commands (i.e. restart and shutdown) with
the new pmdfshr.exe in place.
Download the appropriate .ZIP file. Set your default directory
to PMDF_ROOT:[000000] and use UnZip to decompress the files.
The files will automatically be restored to the proper directories.
NOTE: be sure to set the protections of PMDF_EXE:PMDFSHR.EXE
and PMDF_EXE:LDAPV3SHR.EXE to allow WORLD read and execute access:
$ set file/prot=w:re pmdf_exe:pmdfshr.exe
$ set file/prot=w:re pmdf_exe:ldapv3shr.exe
In some cases, new versions of PMDFSHR may alter the format of
compiled configurations. When this happens recompilation is also
necessary:
$ pmdf cnbuild
Failure to recompile the configuration after installing new versions
of PMDFSHR may lead to "compiled configuration version mismatch"
errors.
Next, be sure to start PMDF by issuing the following commands:
$ @sys$startup:pmdf_startup
$ pmdf start dispatcher
======================================================================
Solaris
Before installing a new libpmdf.so, issue the following command:
# pmdf shutdown
Failure to issue the above command could result in the current
processes not recognizing commands (i.e. restart and shutdown) with
the new libpmdf.so in place.
Download the appropriate .tar.gz file. Use 'gunzip' to
decompress the tar file, then use 'tar' to extract the files.
Move to the /pmdf directory to do the extraction; the files
will automatically be placed in the correct bin and lib
subdirectories:
> cd /pmdf
> gunzip pmdf66-sparc-openssl.1.0.2g.tar.gz
> tar xvf pmdf66-sparc-openssl.1.0.2g.tar
> cd /pmdf/lib
> gunzip xvf openssl-1.0.2l-sparc.tar.gz
> tar xvf openssl-1.0.2l-sparc.tar
After the files are untarred into their proper directories,
ensure that the ownership and protection on each are set correctly:
# chown pmdf:bin /pmdf/lib/libpmdf.so
# chmod 755 /pmdf/lib/libpmdf.so
In some cases, new versions of libpmdf.so may alter the format of
compiled configurations. When this happens recompilation is also
necessary:
# pmdf cnbuild
Failure to recompile the configuration after installing new versions
of libpmdf.so may lead to "compiled configuration version mismatch"
errors.
Next, be sure to start PMDF by issuing the following command:
# pmdf startup
========================================================================
Linux
Before installing a new libpmdf.so, issue the following command:
# pmdf shutdown
Failure to issue the above command could result in the current
processes not recognizing commands (i.e. restart and shutdown) with
the new libpmdf.so in place.
Download the appropriate .zip file. Use 'unzip' to extract the
files.
Move to the /pmdf directory to do the extraction; the files
will automatically be placed in the correct bin and lib
subdirectories:
> cd /pmdf
> unzip pmdf66-linux-openssl.1.0.2g.zip
> cd /pmdf/lib
> unzip openssl-1-0-2l-linux.zip
After the files are unzipped into their proper directories,
ensure that the ownership and protection on each are set correctly:
# chown pmdf:bin /pmdf/lib/libpmdf.so
# chmod 755 /pmdf/lib/libpmdf.so
In some cases, new versions of libpmdf.so may alter the format of
compiled configurations. When this happens recompilation is also
necessary:
# pmdf cnbuild
Failure to recompile the configuration after installing new versions
of libpmdf.so may lead to "compiled configuration version mismatch"
errors.
Next, be sure to start PMDF by issuing the following command:
# pmdf startup