SHA-2 in the wodHttpDLX - WeOnlyDo Discussion board

SHA-2 in the wodHttpDLX (wodHttpDLX)

by JeremyG, Wednesday, November 16, 2016, 17:14 (2689 days ago)

Hi all,
How long SHA-2 has been supported in the wodHttpDLX library? I've got an ancient VB app that uses it and I've only got part of the source code / build tree (the wodHttpDLX dlls were missing so I don't even know what version it was built against). I'm trying to figure out if it was built with a new enough version of the library that I don't have to worry about it using ancient MD5 hashs or something.

SHA-2 in the wodHttpDLX

by Jasmine, Wednesday, November 16, 2016, 17:15 (2689 days ago) @ JeremyG

Hi Jeremy,

I assume you're referring to SSL/TLS protocol. We use OpenSSL for SSL/TLS, and I can't really say when MD5 was removed from it since we try to be up-to-date with OpenSSL versions.

http://www.weonlydo.com/HttpDLX/http-web-component.asp?rnotes=1

Kind regards,
Jasmine.

SHA-2 in the wodHttpDLX

by JeremyG, Wednesday, November 16, 2016, 18:31 (2689 days ago) @ Jasmine

That sounds good. I didn't realize you were backended by openssl (though in hindsight it seems obvious :-) ).

Are you calling OpenSSL_add_all_algorithms()? IIRC it's needed to get newer algorithms like SHA2 in openssl versions before 0.9.8o.

SHA-2 in the wodHttpDLX

by Jasmine, Wednesday, November 16, 2016, 18:33 (2689 days ago) @ JeremyG

Hi Jeremy,

probably, yes. Note that we use OpenSSL 1.0.2 in recent wodHttpDLX versions.

Jasmine.