Last Update:            29-MAY-2019 00:55
Operating System:       OpenVMS, Linux, Solaris
Component:              PMDF Shared Library, SMTP
Base Level Required:    PMDF V6.7
Other Requirements:     None

Platform                Subdirectory      File(s) to download
--------                ------------      --------------------
OpenVMS Alpha           vms               pmdf067-openssl-1-0-2s-alpha.zip
OpenVMS I64             vms               pmdf067-openssl-1-0-2s-i64.zip
Linux                   linux             pmdf67-linux-openssl-1.0.2g.zip
                                          openssl-1-0-2s-linux.zip
Solaris SPARC           solaris-sparc     pmdf67-sparc-openssl-1.0.2g.tar.gz
                                          openssl-1.0.2l-sparc.tar.gz

General info
------------

     Note: To install the OpenSSL 1.0.2s update on Linux,
  you must have installed the 1.0.2g kit first, as it includes
  additional images required for the upgrade. The 1.0.2r kit only
  includes new libcrypto and libssl libraries.



     You will need to have a License PAK with a release date after the date of
  PMDFSHR.EXE or libpmdf.so to run PMDF.  Note that this may apply to other
  images as well.

     Patches may be obtained from the anonymous FTP account on
  ftp.pmdf.process.com.  Use FTP to connect to the host ftp.pmdf.process.com
  and login as the user anonymous.  Use your e-mail address as the login
  password.

     Move to the pmdf_67_patches subdirectory:

        ftp> cd pmdf_67_patches

     Patches will be located in platform-specific sub-trees, as follows:

        Platform        Subdirectory
        --------        ------------
        OpenVMS         vms
        Linux           linux

     When FTPing images, be sure to FTP them as binary.  Before retrieving
  such an image with the GET command, be sure to put your FTP into binary
  mode with a command such as TYPE IMAGE or TYPE BINARY.



Change history
--------------
28-MAY-2019

  This update includes an upgrade to OpenSSL 1.0.2s.

28-FEB-2019

  This update includes an upgrade to OpenSSL 1.0.2r.

20-NOV-2018

  This update includes an upgrade to OpenSSL 1.0.2q.

16-AUG-2018

  This update includes an upgrade to OpenSSL 1.0.2r.



 8-NOV-2017

  This update includes an upgrade to OpenSSL 1.0.2m.



26-MAY-2017

  This update includes an upgrade to OpenSSL 1.0.2l.



26-JAN-2017

  This update includes an upgrade to OpenSSL 1.0.2k.



26-SEP-2016

  This update includes an upgrade to OpenSSL 1.0.2j.



24-SEP-2016

  This update includes an upgrade to OpenSSL 1.0.2i.



11-MAY-2016

  This update includes an upgrade to OpenSSL 1.0.2h.



21-APR-2016

  This update corrects the following problems:

   o LDAP over TLS was inadvertently broken by the first release.

   o IMAP and POP3 connections were getting closed every 30 seconds
     or so, resulting in numerous "deadstream" entries in the
     connection.log file. The problem wasn't noticeable by users, but
     it did result in additional unnecessary overhead as clients were
     forced to reconnect more often than they were supposed to.

   o TLS was not used for outgoing SMTP connections in cases when it
     should have been.

   o For Linux and Solaris, a long-standing problem with some email
     entries not getting added to the queue cache database in a timely
     fashion from time to time has been resolved.

   o For Linux and Solaris, new pine images are provided to correct
     a problem introduced by the first release of this OpenSSL patch.



 8-MAR-2016

  PMDF now uses OpenSSL 1.0.2g, an upgrade from 0.9.8. New versions
  of PMDFSHR (libpmdf), as well as the tcp_smtp_* and the tcp_* images
  are included. Also included is a new version of dispatcher that
  allows for larger mappings files.



Installation
------------
VMS

        Before installing a new PMDFSHR, issue the following command:

                $ pmdf shutdown

        Failure to issue the above command could result in the current
        processes not recognizing commands (i.e. restart and shutdown) with
        the new pmdfshr.exe in place.

        Download the appropriate .ZIP file. Set your default directory
        to PMDF_ROOT:[000000] and use UnZip to decompress the files.
        The files will automatically be restored to the proper directories.

        NOTE: be sure to set the protections of PMDF_EXE:PMDFSHR.EXE
        and PMDF_EXE:LDAPV3SHR.EXE to allow WORLD read and execute access:

		$ set file/prot=w:re pmdf_exe:pmdfshr.exe
		$ set file/prot=w:re pmdf_exe:ldapv3shr.exe

        In some cases, new versions of PMDFSHR may alter the format of
        compiled configurations. When this happens recompilation is also
        necessary:

                $ pmdf cnbuild

        Failure to recompile the configuration after installing new versions
        of PMDFSHR may lead to "compiled configuration version mismatch"
        errors.

        Next, be sure to start PMDF by issuing the following commands:

		$ @sys$startup:pmdf_startup
		$ pmdf start dispatcher



======================================================================
Solaris

        Before installing a new libpmdf.so, issue the following command:

                # pmdf shutdown

        Failure to issue the above command could result in the current
        processes not recognizing commands (i.e. restart and shutdown) with
        the new libpmdf.so in place.

        Download the appropriate .tar.gz file. Use 'gunzip' to
        decompress the tar file, then use 'tar' to extract the files.
        Move to the /pmdf directory to do the extraction; the files
        will automatically be placed in the correct bin and lib
        subdirectories:

	 > cd /pmdf
         > gunzip pmdf66-sparc-openssl.1.0.2g.tar.gz
         > tar xvf pmdf66-sparc-openssl.1.0.2g.tar
         > cd /pmdf/lib
         > gunzip xvf openssl-1.0.2l-sparc.tar.gz
         > tar xvf openssl-1.0.2l-sparc.tar

        After the files are untarred into their proper directories,
        ensure that the ownership and protection on each are set correctly:

                # chown pmdf:bin /pmdf/lib/libpmdf.so
                # chmod 755 /pmdf/lib/libpmdf.so

        In some cases, new versions of libpmdf.so may alter the format of
        compiled configurations. When this happens recompilation is also
        necessary:

                # pmdf cnbuild

        Failure to recompile the configuration after installing new versions
        of libpmdf.so may lead to "compiled configuration version mismatch"
        errors.

        Next, be sure to start PMDF by issuing the following command:

                # pmdf startup

========================================================================
Linux

        Before installing a new libpmdf.so, issue the following command:

                # pmdf shutdown

        Failure to issue the above command could result in the current
        processes not recognizing commands (i.e. restart and shutdown) with
        the new libpmdf.so in place.

        Download the appropriate .zip file. Use 'unzip' to extract the
	files.

        Move to the /pmdf directory to do the extraction; the files
        will automatically be placed in the correct bin and lib
        subdirectories:

	 > cd /pmdf
         > unzip pmdf66-linux-openssl.1.0.2g.zip
         > cd /pmdf/lib
         > unzip openssl-1-0-2s-linux.zip

        After the files are unzipped into their proper directories,
        ensure that the ownership and protection on each are set correctly:

                # chown pmdf:bin /pmdf/lib/libpmdf.so
                # chmod 755 /pmdf/lib/libpmdf.so

        In some cases, new versions of libpmdf.so may alter the format of
        compiled configurations. When this happens recompilation is also
        necessary:

                # pmdf cnbuild

        Failure to recompile the configuration after installing new versions
        of libpmdf.so may lead to "compiled configuration version mismatch"
        errors.

        Next, be sure to start PMDF by issuing the following command:

                # pmdf startup