[Xitami] Study: Paucity of patches on OpenSSL

[Thomas J. Hruska]

At 09:24 AM 11/4/2003 -0500, Bowden, Zeb writeth:
>
>Has anyone been able to prove one way or another if Xitami is susceptible
to the OpenSSL vulnerabilities? I'm pretty sure it is, but have no proof&
>
>Has anyone noticed any unexplained crashes related to ssl/xitami pro? 
>
>
>Only 3 percent of Web servers running the open-source version of a secure
communications component, OpenSSL, may be using the latest, bug-free
software, according to a recent survey by
<http://rss.com.com/redir?destUrl=http%3A%2F%2Fnews.netcraft.com%2F&siteId=3
&oId=2110-1002-5101555&ontId=1009&lop=nl_ex>Internet
>
>watcher NetCraft. The 
><http://rss.com.com/2100-1002-5085327.html?tag=nl>OpenSSL secure sockets
layer software allows servers to securely communicate with browsers across
the Internet.
>
>http://rss.com.com/2110-1002_3-5101555.html?part=rss&tag=feed&subj=news&foo
=Study:%20Paucity%20of%20patches%20on%20OpenSSL%2011--04

If iMatix would utilize the Win32 OpenSSL Installation Project into Xitami
instead of statically linking it, there wouldn't be an issue here and they
would have considerably less overhead.  It would be up to everyone to
either build OpenSSL themselves or use the default build provided by the
Win32 OpenSSL Installation Project:

http://www.shininglightpro.com/search.php?searchname=Win32+OpenSSL

Hope this helps!


          Thomas J. Hruska -- shinelight@shininglightpro.com
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/

`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~
  Tired of expensive $5,000+ web application servers like ColdFusion?
  Try Nuclear Vision today!

  http://internal.shininglightpro.com/search.nvm?searchname=Nuclear+Vision

  Announcing Nuclear Vision v1.1, a superior scripting language with
powerful features in a HTML-like syntax.