1. Home

Product groups

Support

Open SSL 1.1.1 - WeOnlyDo Discussion board

Open SSL 1.1.1 (General questions)

by Mykola Melnyk, Wednesday, May 12, 2021, 11:01 (380 days ago)

Is there some kind of a deadline when WeOnlyDo ActiveX components start supporting OpenSSL 1.1.1
(interested in SFTP, SSH components)?

locked
  2134 views

Open SSL 1.1.1

by wodSupport, Wednesday, May 12, 2021, 21:25 (380 days ago) @ Mykola Melnyk

Hi.

I'm not really sure why you need OpenSSL 1.1.1 for SSH/SFTP, since those protocols have nothing to do with SSL, so TLS1.3 which is major feature of 1.1.1 doesn't apply to SSH protocol. Can you please elaborate why you need OpenSSL 1.1.1?

As for when it will be supported - as soon as FIPS is available as 'drop in' DLL, as it is now with 1.0.2.

Hope this helps!
Jasmine

locked
  2087 views

Open SSL 1.1.1

by Mykola Melnyk, Thursday, May 13, 2021, 09:58 (380 days ago) @ wodSupport

Thank you for your quick response.

Our concern originates from the known list of vulnerabilities in OpenSSL 1.0.x. Numerous customers of our company prefer to consume products based on OpenSSL 1.1.1 even before FIPS support is provided. Though the best solution is still both OpenSSL 1.1.1 and FIPS in one bucket.
As far as we access OpenSSL functionalities mainly through WeOnlyDo libraries that's the reason why I raise the issue.

Thank you

locked
  2070 views

Open SSL 1.1.1

by wodSupport, Thursday, May 13, 2021, 09:59 (380 days ago) @ Mykola Melnyk

Mykola,

hi. Can you point to the list of vulnerability that concern crypto algorithms that are used, not the SSL/TLS layer itself which we don't use? If it's something to be fixed ASAP we'll be happy to know about it.

We'lre also for 1.1.1 (in other products mainly) but FIPS is more important at this time.

Jasmine

locked
  2083 views

Open SSL 1.1.1

by Mykola Melnyk, Thursday, May 13, 2021, 15:44 (379 days ago) @ wodSupport

The first one I have handy:
https://nvd.nist.gov/vuln/detail/CVE-2019-1552

locked
  2090 views

Open SSL 1.1.1

by wodSupport, Thursday, May 13, 2021, 16:03 (379 days ago) @ Mykola Melnyk

Hi.

But, that is for TLS protocol. We don't implement or use SSL/TLS in SSH protocol. We use only OpenSSL's crypto libraries. This doesn't apply in any way to SSH protocol.

Jasmine

locked
  2085 views

I can only hope I will have the pleasure to work with other products by "We Only Do" in the future.

Tomer Spivak
Verint Systems Ltd

Your professionalism is reflected into your email, your product and your web site. I am confident that these will make the difference.

Sylvain Paquette
R&D Analyst at InfoPharm Inc.

Thanks! We love your software and your great support!

Sandy Fliderman
Primary Development Corporation

We are having great success with your component ... email server that has over 750 000 mailboxes back ended by a SQL server...

Conrad Leigh
Leaf Wireless

...I'm extremely impressed with the product, it represents excellent value for money...

Danny Haworth
Assetdisk

...wodFtpDlx was exactly what I needed, it worked, and it was priced right...

David Keenan
Serengeti Systems Incorporated

This has been, by far, the best experience I have ever had dealing with a support entity in my long career in the technical arena

Frank Kloskowski
GlobalCare Inc.

...with a minimum of effort as the DLL interface was written with such simplicity...

Zack Menendez
Mapframe Corporation

We have recently completed a large 1200+ location project where reliable Telnet and SSH connectivity was required. wodSSH worked flawlessly and allowed our staff to complete our project ontime and within budget.

James Sievers
Harbor Technologies

We have recently completed a large 1200+ location project where reliable Telnet and SSH connectivity was required. wodSSH worked flawlessly and allowed our staff to complete our project ontime and within budget.

James Sievers
Harbor Technologies