SSL Notes

Export Restrictions

We cannot distribute the SSL files directly due the complexity of possible export restrictions, however you are free to download and use them. The restrictions only apply to export, not import. In recent years the restrictions have been lifted significantly, however it is still a possible legal liability and thus we choose not to take the risk by hosting them on our server.

Interface Change

OpenSSL changed the interface after 0.9.8e and makes later versions unusable without recompiling and changing code. Future IntraWeb builds will be updated to reflect these changes, but this does not help existing users who do not want to change their IntraWeb version. IntraWeb uses a version of Indy that requires specifically the OpenSSL 0.9.8e API.

Stand Alone Servers Only

The SSL libraries are only needed by stand alone servers only. Applications deployed as ISAPI use SSL from the web server host.

Security Issues

0.9.8e has some potentially serious security flaws. Because of this 0.9.8h is recommended.

0.9.8l

Arvid Winkelsdorf  prepared a new version (0.9.8l) to be used by IntraWeb users. Download it from here. Please check the readme.txt file included in the ZIP for usage instructions.

0.9.8h

To help users progress beyond 0.9.8e without changing IntraWeb versions, Arvid Winkelsdorf has recompiled a special distribution of 0.9.8h that is interface compatible with 0.9.8e. You will need to rename the included pas files and put them into the IntraWeb lib directory. These libraries have not been fully tested for compatibility yet. Please report any issues.

0.9.8e

• OpenSSL 0.9.8e Indy distribution
  
• OpenSSL Libraries from Apache
• Download and install this version of Apache
• From the Apache\bin directory copy the following files:
  
• libeay.dll
• ssleay.dll
• zlib1.dll
• Uninstall Apache