VSI SSL3 for OpenVMS

V3.0-15 Release Notes

September 2024

Based on OpenSSL 3.0.15

VSI SSL3 V3.0-15 for OpenVMS X86_64 server

VSI-X86VMS-SSL3-V0300-15-1.PCSI

----------------------------------------------------------

VMS Software, Inc. is pleased to provide you with the latest release of
VSI SSL3 for OpenVMS. VSI SSL3 (Secure Sockets Layer) is based on the
3.0.15 release from the OpenSSL Group.

See http://www.openssl.org for information about OpenSSL. Please refer to
"VSI SSL3 Installation Guide and Release Notes" found in the installation
package for more information about VSI SSL3.


Directory Structure
-------------------------------------------
The SSL3 installation creates the following directory structure and files in
PCSI$DESTINATION, which defaults to SYS$SYSDEVICE:[VMS$COMMON]:

[SSL3]                 -  Top-level SSL3 directory
[SSL3.X86_64_EXE]      -  Contains the images for the X86_64 server platform*
[SSL3.COM]             -  Directory to hold the various command procedures
[SSL3.DEMOCA]          -  Directory structure to demo SSL3's CA features
[SSL3.DEMOCA.CERTS]    -  Directory to hold the certificates and keys
[SSL3.DEMOCA.CONF]     -  Contains the configuration files
[SSL3.DEMOCA.CRL]      -  Contains revoked certificates and CRLs
[SSL3.DEMOCA.PRIVATE]  -  Directory for private keys and random data
[SSL3.DOC]             -  OpenSSL.org provided documentation and information
[SSL3.INCLUDE]         -  Contains the C Header (.H) files
[SSL3.LIB]             -  Contains static libraries (.OLB) files
[SSL3.MODULES]         -  Contains dynamically loadable OpenSSL modules


[SYS$STARTUP]          -  Startup and shutdown templates and files
[SYSHLP]               -  Release notes
[SYSHLP.EXAMPLES.SSL3] -  SSL3 crypto and secure session examples
[SYSLIB]               -  SSL3 shareable image files
[SYSTEST]              -  SSL3$IVP.COM test file

* Note: Each system will have only one xxx_EXE.DIR, depending on the
        architecture of the system.


Coexistance with other SSL products
-------------------------------------------
The VSI SSL3 product is designed to co-exist with other SSL products released
by VSI so that applications and components dependent on either version will
run on the same system. For the list of the compatible products and for more
information related to coexistence in terms of using directory structures,
command procedure names, libraries, and logical names please refer to "VSI
SSL3 Installation Guide and Release Notes" found in the installation package.


Post-Installation Configuration
-------------------------------------------
After the installation is complete, VSI SSL3 needs to be configured. For more
information on configuring please refer to "VSI SSL3 Installation Guide and
Release Notes" found in the installation package.


SSL3 startup, shutdown, and logical names
-------------------------------------------
Add SSL3$STARTUP.COM to SYS$MANAGER:SYSTARTUP_VMS.COM to define SSL3$ logical
names and install shareable images. Also, add SSL3$SHUTDOWN.COM to
SYS$MANAGER:SYSHUTDWN.COM to remove installed images and deassign the SSL3$
logical names at system shutdown. For more information please refer to "VSI
SSL3 Installation Guide and Release Notes" found in the installation package.


SSL3 Symbols
--------------
SSL3 foreign symbols are defined with the SSL3 command procedure
SSL3$COM:SSL3$UTILS.COM as follows:

$ @SSL3$COM:SSL3$UTILS.COM


Installation Verification Procedure (IVP)
-----------------------------------------
The base installation verification procedure checks for presence of all
the required files and logical names. The procedure also initiates
the executable image to check if shareable images are accessible. Normally
the base Installation Verification Procedure (IVP) is executed when SSL3
is installed. To run the SSL3 base IVP manually, type the following command:

$ @SYS$TEST:SSL3$IVP.COM

Note that the IVP would not be executed at installation time if the PCSI
qualifier /NOTEST was utilized.


Removing SSL3
---------------
To remove SSL3 from the system disk or destination directory, type
the following command:

$ PRODUCT REMOVE SSL3

Note that some files may remain and will not be removed when the VSI SSL3
product is removed. These are generated files such as SSL3$IVP.LOG that
gets created by running the IVP test program and other files such as
certificates that have been created in the SSL3$CERTS directory.