OpenSSL

[Styx]

I am also using 0.9.8K without issue.

Download it (from inka.de) for Pop Peeper here.

This is the link for the OpenSSL Project

[Styx]

Just an update, still no issues with 0.9.8K.

[lwc]

Jeff asked for no direct links (I gave enough of a hint to get there). Also, we all know where the official site is.

[lwc]

I've started to successfully use 0.9.8l (just Google OpenSSL-0.9.8l-Win32.zip).

[Tiggz]

The Win32 OpenSSL Installation Project just released SSL v1.0.0 , and it works well with PP.

This is the link for slproweb.com

Regards

[Jeff]

Out of beta. Thanks for the tip.

[lwc]

I've started to successfully use 1.0.0 (from the default build made by Win32 OpenSSL v1.0.0 Light) - that's right, v1.0.0!

[lwc]

I've started to successfully use 1.0.0a (from the default build made by Win32 OpenSSL v1.0.0a Light).

For those who want no dependencies on MS VC++ runtime, it also works with openssl-1.0.0a-i386-win32.zip

[JRF]

.
lwc

1- in these Forums someone reported a problem with SSL 0.9.8.10 , then Jeff said the bug would not affect PP operation : I just can not find those posts to consolidate in this topic .

2- what is the current situation of the SSL versions versus your tests ?

3- thanks for all the topics integrity Reports you use to open .

[lwc]

Well, I've just started to successfully use 1.0.0b (from the "slightly patched" build made by Win32 OpenSSL v1.0.0b Light)...until I got this random crash:

OpenSSL 1.0.0.0b: Fatal

I guess it's back to v1.0.0.0a for me. But why is it random?

Meanwhile, there's currently no MS VC++ runtime-free version.

[Jeff]

Considering you've had such good luck with previous OpenSsl builds, I find it worrisome that the v1.0.0b build causes you problems. I plan on compiling the latest build once PP v3.8 is out, perhaps a v1.0.0c will be out by then.

[lwc]

Actually, I only got the aforementioned error once and so ended up not downgrading.

I've then started to successfully use 1.0.0c (from the default build made by Win32 OpenSSL v1.0.0c Light).

For those who want no dependencies on MS VC++ runtime, it also works with openssl-1.0.0c-i386-win32.zip

[lwc]

I got the random error again! Since it's obviously here to stay, can you please start investigating it?

[JRF]

I am also getting error on SSL , randomly in the last month or more , always as :

Code: Select all

AppName: poppeeper.exe	 AppVer: 3.7.0.0 	 ModName: ssleay32.dll
ModVer: 0.9.8.10	 Offset: 00019914

It seems to happen on retrieval , and also on disconnecting Imap .

As I am unable to understand/install the new SSL releases mentioned , I was tempted to use a version 0.9.8.14 , which I found installed inside OpenOffice : very bad idea ?? huh ??

[Styx]

I used 0.9.8.11 for many months without issue (since PP 3.7) and now have switched
to 1.0.0.3 (1.0.0.c) and it seems to work well without issue.

[JRF]

Thanks for the lwc + Styx opinions on SSL 1.0.0.3 (1.0.0c) .

As a non-expert , I downloaded openssl-1.0.0c-i386-win32.zip from indy.fulgan.com/SSL/

(the MD5's are in the file Readme) , then extracted files ssleay32.dll and libeay32.dll

into PP install folder , restarted PP , performed a checkmail on all accounts : so far OK .

[Tiggz]

The Win32 OpenSSL Installation Project just released OpenSSL v1.0.0d , and it works well with PP.

Changelog:

*) Fix parsing of OCSP stapling ClientHello extension. CVE-2011-0014
[Neel Mehta, Adam Langley, Bodo Moeller (Google)]

*) Fix bug in string printing code: if *any* escaping is enabled we must
escape the escape character (backslash) or the resulting string is
ambiguous.
[Steve Henson]

Download: http://www.slproweb.com/products/Win32OpenSSL.html" onclick="window.open(this.href);return false;

Download DLLs only (ssleay32.dll and libeay32.dll): http://www.box.net/shared/jvt019ifst" onclick="window.open(this.href);return false;

Regards

[JRF]

Tiggz , thanks a lot for the information and the links re. OpenSSL v1.0.0d = SSL 1.0.0.4 .

[ in fact I had problems to get from Box.net (ports/firewall) ; did you consider to upload here in the Forums (function : Upload Attachments) , and to state the MD5's ? ]

[Tiggz]

@JRF

Of course - DLLs are attached

MD5: 5F3F54BA62DCC8F814A5FEA767E4A63D

[JRF]

Tiggz , thank you , SSL 1.0.0.4 just downloaded / verified / installed in PP .

Going to test it for a while , first PP checkmail was OK .