OpenSSL minimum version for saml2cpp? - ESOE Development

Message from discussion OpenSSL minimum version for saml2cpp?

Shaun Mangelsdorf

More options Feb 16, 9:57 am

From: Shaun Mangelsdorf <s.mangelsd...@gmail.com>

Date: Mon, 16 Feb 2009 08:57:31 +1000

Local: Mon, Feb 16 2009 9:57 am

Subject: Re: [esoe-dev] Re: OpenSSL minimum version for saml2cpp?

  Reply to author
  |
  Forward
  | Print
  | View thread
  | Show original
  | Report this message
  | Find messages by this author
  

Hi all,

I can clarify a little here. We developed against a 0.9.8 version (the
specific version escapes me, but 0.9.8e sounds about right). We currently
have a production SPEP running on Redhat 4 which uses 0.9.7a (not sure if
this has Redhat-specific patches).. So at the least, it is API-compatible
with that version.

As Bradley mentioned, the later the better. I wouldn't be keen on fixing any
bugs that were caused by earlier versions of OpenSSL than 0.9.7.

Regards,
Shaun

2009/2/15 Bradley Beddoes <bedd...@intient.com>

> Hi,
> I believe the minimum was 0.9.8e but the later the better.

> It depends on it in a number of ways the most important being:

> signature / document verification on unmarshaling
> signature generation for marshaling
> key verification for metadata extraction
> various load/store routines for keys

> regards
> Bradley

> On 14/02/2009, at 6:14 PM, Luke Daley wrote:

> > Hey guys,

> > Anyone know what the minimum version of OpenSSL that ESOE supports is?

> > Out of interest, how is saml2cpp depending on OpenSSL?

> > Cheers,

> > LD.

> Bradley Beddoes
> Lead Software Architect
> Intient Pty Ltd

> Twitter: @bradleybeddoes

Reply to author Forward