Re: inconsistent versions of ssleay32.dll in xp & win2k

From: Alun Jones [MSFT] (alunj_at_online.microsoft.com)
Date: 11/30/04

  • Next message: Beemer Biker: "Re: inconsistent versions of ssleay32.dll in xp & win2k"
    Date: Tue, 30 Nov 2004 14:42:31 -0800
    
    

    "Beemer Biker" <joestateson@grandecom.net> wrote in message
    news:10qptd54nr76s7a@corp.supernews.com...
    > One would expect that the version of the openssl kernel would be newer on
    > xp
    > rather than older. Even more confusing that the latest release of the
    > openssl kernel is 9.7e and I can read at openssl.org where there are
    > exploitable vulnerabilites in earlier version.

    OpenSSL is a third-party product, and has to be installed onto your system.
    It does not come with Windows.

    You have installed an application, or several applications, onto your
    Windows system, and as a result of those installations, now have a version
    of OpenSSL that was shipped with those applications.

    You can either find a copy of OpenSSL to instal for yourself, or find
    whatever application has installed it for you, and ask them how to update to
    the more recent version.

    Since one common reason to update SSL libraries is to fix bugs in the
    implementation, you may consider this quite an important thing to keep
    updated even if it isn't visibly breaking on you.

    Alun.
    ~~~~


  • Next message: Beemer Biker: "Re: inconsistent versions of ssleay32.dll in xp & win2k"
  • Quantcast