Updated Knapsack package: OpenSSL 1.0.0n

[Luis Lavena]

Hello,

Due recent disclosed vulnerabilities in OpenSSL [1], An updated version of

this package is available:

x86-windows

http://packages.openknapsack.org/openssl/openssl-1.0.0n-x86-windows.tar.lzma

  MD5: 9506530353f3b984680ec27b7270874a

x64-windows

http://packages.openknapsack.org/openssl/openssl-1.0.0n-x64-windows.tar.lzma

  MD5: 8edef798e06c26ec5b936db472fea710

---

If you're using Knapsack packages (headers and libraries), extract the

contents as indicated in the original post [2.1][2.2]

If you're just using RubyInstaller, extract only the DLLs from the package

(using 7-Zip) located inside the bin folder.

Use the matching package for your version of Ruby: x86-windows for 32bits

and x64-windows for 64bits (x64).

I'm updating RubyInstaller recipes to use this version in the next few

minutes, so newer versions of RubyInstaller will ship with the updates.

Please note that Ruby's OpenSSL extension defines `OpenSSL::OPENSSL_VERSION`

during compilation, so it will report the incorrect version [3]

Regards,

[1] https://www.openssl.org/news/secadv_20140806.txt

[2.1] https://groups.google.com/forum/#!searchin/rubyinstaller/knap-build/rubyinstaller/-D9vNo459RU/r81EycDOfyYJ

[2.2] https://groups.google.com/forum/#!searchin/rubyinstaller/knap-build/rubyinstaller/4ulo3o1bQOM/2F1f24XWWaQJ

[3] https://groups.google.com/d/msg/rubyinstaller/e1DdfLy6-J0/3tgd9VX7ZXkJ

--
Luis Lavena
AREA 17
-
Perfection in design is achieved not when there is nothing more to add,
but rather when there is nothing more to take away.
Antoine de Saint-Exupéry