Environment
Access Manager 4.5
Access Manager 4.4
Access Manager 4.3
Access Manager 4.2
NetIQ Access Gateway
Situation
The OpenSSL open source project team recently released an update to
1.0.2t with a number of fixes
(https://www.openssl.org/news/openssl-1.0.2-notes.html). The Access
Gateway component of Access Manager uses this library for cryptographic
functions. It is recommended that all the Access Gateways be updated
with this latest OpenSSL patch, using the instructions below, to avoid
any concerns.
Resolution
Follow the Access Manager Installation and Upgrade Guide:
Access Manager 4.5: https://www.netiq.com/documentation/access-manager-45/install_upgrade/data/b1dxk0ds.html
Access Manager 4.4: https://www.netiq.com/documentation/access-manager-44/install_upgrade/data/b1dxk0ds.html
Access Manager 4.3: https://www.netiq.com/documentation/access-manager-43/install_upgrade/data/b1dxk0ds.html
Access manager 4.2: https://www.netiq.com/documentation/access-manager-42/install_upgrade/data/b1dxk0ds.html
To verify the openssl version used by Access Gateway use below command on Access Gateway terminal:
mgalloway8:~ # rpm -qa | grep nacm-apache-extra
novell-nacm-apache-extra-4.2.0-1.0.2t
novell-nacm-apache-extra-4.2.0-1.0.2t