[Xitami] xitami crashing

[Bowden, Zeb]

How can I tell which version of openssl is compiled into xitami?
the dates on my xipro.exe and xiprosrv.exe files is 12/05/2001 so I'm sure it can't have 0.9.7b since that version of openssl wasn't released yet...
how do I get the newest version?

we do run xitami as a gui application rather than a service, so that may have something to do with the crashes as well..but they just started recently, which is what made me believe it's probably openssl related...

Thanks for the info!

 

-----Original Message-----
From: Thomas J. Hruska [mailto:shinelight@shininglightpro.com]
Sent: Monday, June 30, 2003 4:30 PM
To: xitami@lists.xitami.org
Subject: Re: [Xitami] xitami crashing


At 02:52 PM 6/30/2003 -0400, Bowden, Zeb writeth:
>Our xitami instance(W2K server, SP3) has crashed twice in the past 2 weeks
for no apparent reason...
>an entry from our crash.log file looks like
>22/Jun/2003:09:05:32 -0500 Xitami v2.4d10 Abort at smtssl:24: (3, 9)
>does anyone know how to interpret this?
>could this be one of the openssl vulnerabilities?

Are you running Xitami as a service or a GUI application?  The NT service
is more stable than the GUI.

What version of OpenSSL is compiled into the server?  Most applications
should be fully switched over to the 0.9.7 series (latest = 0.9.7b) unless
there is sufficient reason to stick with the older 0.9.6 series (latest =
0.9.6j).  Anything less than 0.9.7b or 0.9.6j is subject to security
vulnerabilities (and/or crash bugs depending on how old it is) and XiPro
should be upgraded immediately.

Hope this helps!


          Thomas J. Hruska -- shinelight@shininglightpro.com
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/

--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami