Verified Answers

If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it!  Learn more

  • State Verified Answer
  • Replies replies
    2
  • Subscribers subscribers
    203
  • Views views
    124
  • Users 0 members are here
Related
Options

OA 12.26 OpenSSL 3.x

RobertoMarinoHP

Hi,

I have a macchian installed with OA agent version 12.21 which submitted to VA/PT gave the vulnerability related to OpenSSL certificate because old version 1.1.1.

I found that as a solution just upgrade to version 12.26 because it has OpenSSL version 3.x.x inside.

Only once the upgrade is completed if I run the command “openssl version” I see the older version 1.1.1.

From the online documentation I see: https://docs.microfocus.com/doc/Operations_Agent/12.26/ReleaseSummary

Upgraded open source components

Operations Agent 12.26 upgrades the following open source components to a newer version:

  • OpenSSL 3.0.13

How can I verify that the OpenSLL version has actually been upgraded?
I also tried searching the installation file path but couldn't find anything.

Would anyone be able to help me? I need to be able to prove that the version of OpenSSL has actually been upgraded.

Kind regards,
Roberto Marino.

  • Verified Answer

    +1  

    Hello,

    You have to know that openSSL dynamically linked within libOvSecCore.so. 

    Then you can run strings on the shared object/library:

    # /opt/OV/bin/opcagt -version
    12.26.008

    # ldd /opt/OV/lbin/eaagt/opcmsga |grep -i libOvSecCore
    libOvSecCore.so => /opt/OV/lib64/libOvSecCore.so (0x00007fc74a600000)

    # strings /opt/OV/lib64/libOvSecCore.so |grep "OpenSSL 3.0"
    OpenSSL 3.0.13 30 Jan 2024

    Running "openssl version" shows the version of the executable in the path called openssl and is not related to OA12.  /usr/bin/openssl is a command line tool.

    # /usr/bin/openssl version
    OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)

    I hope this answers your question.

  • 0 in reply to   

    Thank you very much,

    I was able to verify the version correctly.

    Regards, Roberto.

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.