What is the UnixWare 7D OpenSSL 1.0.2u Package?

The OpenSSL 1.0.2u package is an updated OpenSSL for UnixWare 7D that
addresses the following problems or new features.

Problems Fixed
--------------
Major changes between OpenSSL 1.0.2t and OpenSSL 1.0.2u [20 Dec 2019]

     * Fixed an an overflow bug in the x64_64 Montgomery squaring
       procedure used in exponentiation with 512-bit moduli
       (CVE-2019-1551)

Major changes between OpenSSL 1.0.2s and OpenSSL 1.0.2t [10 Sep 2019]

     * Fixed a padding oracle in PKCS7_dataDecode and
       CMS_decrypt_set1_pkey ([11]CVE-2019-1563)
     * For built-in EC curves, ensure an EC_GROUP built from the curve
       name is used even when parsing explicit parameters
     * Compute ECC cofactors if not provided during EC_GROUP construction
       ([12]CVE-2019-1547)
     * Document issue with installation paths in diverse Windows builds
       ([13]CVE-2019-1552)

Major changes between OpenSSL 1.0.2r and OpenSSL 1.0.2s [28 May 2019]

     * None


     References
     ==========
     See OpenSSL release notes at
     https://www.openssl.org/news/openssl-1.0.2-notes.html

Features Added to this package
---------------------------------
  1. openssl utilities can handle files larger than 2GB

  2. /etc/ssl/certs/xinuos-ca-bundle.crt certificate bundle is provided
     for your convenience. See text starting at line 210 of that file.

     If /etc/ssl/certs/ca-bundle.crt does not exist at install time,
        xinuos-ca-bundle.crt will be copied to ca-bundle.crt

     Xinuos makes no warranties as to the trustworthiness or RFC 3647
     compliance of the certification authorities whose certificates are
     included in this package.

     Assessment and verification of trust is the complete responsibility
     of the system administrator.

Contents
--------

      openssl-1.0.2u-UnixWare7D-i386.pkg.gz
      openssl-dev-1.0.2u-UnixWare7D-i386.pkg.gz

MD5 (openssl-1.0.2u-UnixWare7D-i386.pkg.gz) = ec3f23bf51e9eb35ff3b8b0b201a035a
MD5 (openssl-dev-1.0.2u-UnixWare7D-i386.pkg.gz) = 1943acb93bf4a67f9540fe3412823565

SHA256(openssl-1.0.2u-UnixWare7D-i386.pkg.gz)= 3ebe0dfcf7cc7b5c8dd97063396d5d7effeb51cf699fcd92f84ba8e04a009658
SHA256(openssl-dev-1.0.2u-UnixWare7D-i386.pkg.gz)= 09c772ea8f0468bb773c590f3bb956a52c16cc0ad7cf42ac9ffa7ffa15abab3f

Software Notes and Recommendations
----------------------------------

  The UW7D OpenSSL 1.0.2u package is intended for installation on

        UnixWare 7 Definitive 2018 (also known as D2M1)


Installation Instructions
-------------------------

  1. Download openssl-1.0.2u-UnixWare7D-i386.pkg.gz and
     openssl-dev-1.0.2u-UnixWare7D-i386.pkg.gz files to the /tmp directory
     on your machine.

  2. As root, add the package to your system using these commands:

     $ su -
     Password: <type your root password>
     # gzcat /tmp/openssl-1.0.2u-UnixWare7D-i386.pkg.gz | pkgadd -qd - all

     If you develop software using the OpenSSL libraries, install the
     development package.
     # gzcat /tmp/openssl-dev-1.0.2u-UnixWare7D-i386.pkg.gz | pkgadd -qd - all

  3. The system should be rebooted after installing this package to insure
     all the services using the openssl libraries are restarted.

  4. The upgrade process will not modify existing /etc/ssl/openssl.cnf
     settings if modifications have been made. OpenSSL 1.0.2n may have
     modified default option settings as well as have additional options
     than the earlier openSSL being replaced. The default configuration file
     is /etc/ssl/openssl.cnf.dfl. System administrators should review the
     1.0.2n default options and update /etc/ssl/openssl.cnf settings
     accordingly.

Removal Instructions
--------------------

  1. As root, remove the package using these commands:

     $ su -
     Password: <type your root password>
     # pkgrm openssl

  2. Your system does not contain an OpenSSL after removal of this package.

     Note: removing OpenSSL will break OpenSSH and any other software
           linked against the OpenSSL libraries.

  If you have questions regarding this supplement, or the product on
  which it is installed, please contact your Xinuos software supplier.