OpenSSL 1.0.2o updates for NetIQ Access Manager

  • 7022813
  • 05-Apr-2018
  • 05-Apr-2018

Environment


Access Manager 4.4
Access Manager 4.3

Situation

The OpenSSL open source project team recently released an update to 1.0.2o with a number of fixes (https://www.openssl.org/news/openssl-1.0.2-notes.html). The Access Gateway component of Access Manager uses this library for cryptographic functions. Do the fixes in this updated OpenSSL build effect the Access Gateways.

Resolution

The fixes in the new OpenSSL 1.0.2o do not effect the SSL/TLS functionality used by Access Gateways and as such is not needed.

As a best practice to keep up to date with any security patch, there is a plan to build and include this in the security update channel at a later stage.