OpenSSL EOL
mark collins asked whether the CSDK embeds OpenSSL, given OpenSSL 1.1.1 end of life. IBM's answer, which he posted, was that the CSDK bundles no OpenSSL and uses the server's installed copy, with a GSKit option since about 4.50.FC6 and a minimum of OpenSSL 1.0.x. Youssef Sbai Idrissi said 2.14.0 was the first with OpenSSL 3.0. Paul Watson noted a compatibility layer may be needed.
Auto-generated by Claude from the posts below — may be imperfect; read the full thread.
Given that OpenSSL 1.1.1 will reach EOL in a couple of months, I need to know - does CSDK embed any OpenSSL functionality inside its binaries? Or does it simply use the version of OpenSSL installed on the server? If CSDK includes OpenSSL, does anyone know what is the earliest version of CSDK that was upgraded to use OpenSSL 3.0/3.1? Thanks. ------------------------------ mark collins ------------------------------
I opened a ticket with IBM on this question. Their response: Informix Client SDK gives you the option of using IBM GSKit or OpenSSL when you install it. Informix Client SDK does not have the OpenSSL binaries bundled with it. It simply uses the OpenSSL that is installed on the server. I think we started giving the IBM GSKit vs. OpenSSL option beginning with Informix Client SDK 4.50.FC6. The latest version of Informix Client SDK is 4.50.FC10. We support a minimum OpenSSL version of 1.0.x or later. Posting this in case this thread comes up in someone's search results. ------------------------------ mark collins ------------------------------
CSDK does not embed any OpenSSL functionality inside its binaries.It simply uses the version of OpenSSL installed on the server. And the earliest version of CSDK that was upgraded to use OpenSSL 3.0 is 2.14.0. This version was released on March 8, 2022. ------------------------------ Youssef Sbai Idrissi Software Engineer ------------------------------
Depending on your Linux OS you might need to install the opensll compatibility layer