HP OpenVMS V8.4 includes HP VMS SSL V1.4 as a default system integrated product (layered product). Applications linked with HP VMS SSL V1.3 will not work as expected with the latest HP VMS SSL V1.4. Such applications need to be recompiled and then re-linked with HP VMS SSL V1.4 header files and libraries.
Why HP VMS SSL is not Backward Compatible?
The HP VMS SSL Version 1.4 for OpenVMS is based on the 0.9.8h base level of OpenSSL. HP VMS SSL Version 1.3 for OpenVMS is based on OpenSSL 0.9.7e. Some of the OpenSSL API’s, data structures and commands have changed from the version 0.9.7e to version 0.9.8h thus resulting in backward compatibility issues.
HP VMS engineering recommends the SSL dependent applications to be rebuilt with HP VMS SSL V1.4 shareable(s) as it includes the support for latest security updates.
In case of application noncompliance with the re-compilation/re-link requirement of HP VMS SSL V1.4 library, the OpenVMS operating system terminates the SSL dependent application processes with “ident mismatch with shareable image“ error as provided below:
$ run ssl_test
%DCL-W-ACTIMAGE, error activating image SSL$LIBSSL_SHR32
-CLI-E-IMGNAME, image file
-SYSTEM-F-SHRIDMISMAT, ident mismatch with shareable image
The HP VMS SSL users on OpenVMS platform may benefit from this advisory as provided below if application migration from HP VMS SSL V1.3 to V1.4 is not possible immediately.
©Copyright 2010 Hewlett-Packard Development Company, L.P.
Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective