Open SSL 1.1.1 (General questions)
Is there some kind of a deadline when WeOnlyDo ActiveX components start supporting OpenSSL 1.1.1
(interested in SFTP, SSH components)?
Is there some kind of a deadline when WeOnlyDo ActiveX components start supporting OpenSSL 1.1.1
(interested in SFTP, SSH components)?
by Jasmine, (1830 days ago) @ Mykola Melnyk
Hi.
I'm not really sure why you need OpenSSL 1.1.1 for SSH/SFTP, since those protocols have nothing to do with SSL, so TLS1.3 which is major feature of 1.1.1 doesn't apply to SSH protocol. Can you please elaborate why you need OpenSSL 1.1.1?
As for when it will be supported - as soon as FIPS is available as 'drop in' DLL, as it is now with 1.0.2.
Hope this helps!
Jasmine
by Mykola Melnyk
, (1830 days ago) @ Jasmine
Thank you for your quick response.
Our concern originates from the known list of vulnerabilities in OpenSSL 1.0.x. Numerous customers of our company prefer to consume products based on OpenSSL 1.1.1 even before FIPS support is provided. Though the best solution is still both OpenSSL 1.1.1 and FIPS in one bucket.
As far as we access OpenSSL functionalities mainly through WeOnlyDo libraries that's the reason why I raise the issue.
Thank you
by Jasmine, (1830 days ago) @ Mykola Melnyk
Mykola,
hi. Can you point to the list of vulnerability that concern crypto algorithms that are used, not the SSL/TLS layer itself which we don't use? If it's something to be fixed ASAP we'll be happy to know about it.
We'lre also for 1.1.1 (in other products mainly) but FIPS is more important at this time.
Jasmine
by Mykola Melnyk
, (1830 days ago) @ Jasmine
The first one I have handy:
https://nvd.nist.gov/vuln/detail/CVE-2019-1552
by Jasmine, (1830 days ago) @ Mykola Melnyk
Hi.
But, that is for TLS protocol. We don't implement or use SSL/TLS in SSH protocol. We use only OpenSSL's crypto libraries. This doesn't apply in any way to SSH protocol.
Jasmine

Thanks! We love your software and your great support!

Your professionalism is reflected into your email, your product and your web site. I am confident that these will make the difference.

Congratulations on an excellent product and first rate support!

Thank you so much for your hard work and commitment in producing well thought-out solutions. WeOnlyDo is very committed to customer satisfaction!

We have recently completed a large 1200+ location project where reliable Telnet and SSH connectivity was required. wodSSH worked flawlessly and allowed our staff to complete our project ontime and within budget.

You have been great as far as offering support is concerned and has been extremely responsive to both support requests and suggestions for product enhancements.

It was no small factor, however, that your support in getting me up and running made me buy from you.

Your component works really great. With minor effort I have been able to convert my delphi application...

We have recently completed a large 1200+ location project where reliable Telnet and SSH connectivity was required. wodSSH worked flawlessly and allowed our staff to complete our project ontime and within budget.

...your service has been phenomenal. It's always quick and you are there when I need you.

