What is the UnixWare 7D OpenSSL 1.0.2ub Package?

The OpenSSL 1.0.2ub package is an updated OpenSSL for UnixWare 7D that
addresses the following problems or new features.

Problems Fixed
--------------
Changes between openssl-1.0.2ua-UnixWare7D-i386.pkg and
   openssl-1.0.2ub-UnixWare7D-i386.pkg
       Patched for CVE-2020-1971

Changes between openssl-1.0.2u-UnixWare7D-i386.pkg and
   openssl-1.0.2ua-UnixWare7D-i386.pkg
       There are no binary changes.
       Packaging changes to have /etc/ssl/private group readable by ssl-cert
       Updated root certificate bundle /etc/ssl/certs/xinuos-ca-bundle.crt
       See aditional notes below about xinuos-ca-bundle.crt

Major changes between OpenSSL 1.0.2t and OpenSSL 1.0.2u [20 Dec 2019]

     * Fixed an an overflow bug in the x64_64 Montgomery squaring
       procedure used in exponentiation with 512-bit moduli
       (CVE-2019-1551)

Major changes between OpenSSL 1.0.2s and OpenSSL 1.0.2t [10 Sep 2019]

     * Fixed a padding oracle in PKCS7_dataDecode and
       CMS_decrypt_set1_pkey ([11]CVE-2019-1563)
     * For built-in EC curves, ensure an EC_GROUP built from the curve
       name is used even when parsing explicit parameters
     * Compute ECC cofactors if not provided during EC_GROUP construction
       ([12]CVE-2019-1547)
     * Document issue with installation paths in diverse Windows builds
       ([13]CVE-2019-1552)

Major changes between OpenSSL 1.0.2r and OpenSSL 1.0.2s [28 May 2019]

     * None


     References
     ==========
     See OpenSSL release notes at
     https://www.openssl.org/news/openssl-1.0.2-notes.html

Features Added to this package
---------------------------------
  1. openssl utilities can handle files larger than 2GB

  2. /etc/ssl/certs/xinuos-ca-bundle.crt certificate bundle is provided
     for your convenience. See text starting at line 210 of that file.

     If /etc/ssl/certs/ca-bundle.crt does not exist at install time,
        xinuos-ca-bundle.crt will be copied to ca-bundle.crt

     Xinuos makes no warranties as to the trustworthiness or RFC 3647
     compliance of the certification authorities whose certificates are
     included in this package.

     Assessment and verification of trust is the complete responsibility
     of the system administrator.

Contents
--------

      openssl-1.0.2ub-UnixWare7D-i386.pkg.gz
      openssl-dev-1.0.2ub-UnixWare7D-i386.pkg.gz

MD5 (openssl-1.0.2ub-UnixWare7D-i386.pkg.gz) = 0af444073d43d1449b81e76e09836e4d
MD5 (openssl-dev-1.0.2ub-UnixWare7D-i386.pkg.gz) = 08015fc90de4dd0cea8875801840b3e2

SHA256(openssl-1.0.2ub-UnixWare7D-i386.pkg.gz)= 8fbc027113483ee53e9c3c5d713bbcacd831d1af1ce87034674c9bd9c90c3d84
SHA256(openssl-dev-1.0.2ub-UnixWare7D-i386.pkg.gz)= a5a7413bb46bd4c47918135e6f3f2428bb4115a51d530771d8ca4975944a9117

Software Notes and Recommendations
----------------------------------

  The UW7D OpenSSL 1.0.2ub package is intended for installation on

        UnixWare 7 Definitive 2018 (also known as D2M1)


Installation Instructions
-------------------------

  1. Download openssl-1.0.2ub-UnixWare7D-i386.pkg.gz and
     openssl-dev-1.0.2ub-UnixWare7D-i386.pkg.gz files to the /tmp directory
     on your machine.

  2. As root, add the package to your system using these commands:

     $ su -
     Password: <type your root password>
     # gzcat /tmp/openssl-1.0.2ub-UnixWare7D-i386.pkg.gz | pkgadd -qd - all

     If you develop software using the OpenSSL libraries, install the
     development package.
     # gzcat /tmp/openssl-dev-1.0.2ub-UnixWare7D-i386.pkg.gz | pkgadd -qd - all

  3. The system should be rebooted after installing this package to insure
     all the services using the openssl libraries are restarted.

  4. The upgrade process will not modify existing /etc/ssl/openssl.cnf
     settings if modifications have been made. OpenSSL 1.0.2n may have
     modified default option settings as well as have additional options
     than the earlier openSSL being replaced. The default configuration file
     is /etc/ssl/openssl.cnf.dfl. System administrators should review the
     1.0.2n default options and update /etc/ssl/openssl.cnf settings
     accordingly.

Removal Instructions
--------------------

  1. As root, remove the package using these commands:

     $ su -
     Password: <type your root password>
     # pkgrm openssl

  2. Your system does not contain an OpenSSL after removal of this package.

     Note: removing OpenSSL will break OpenSSH and any other software
           linked against the OpenSSL libraries.

  If you have questions regarding this supplement, or the product on
  which it is installed, please contact your Xinuos software supplier.