Release Warnings Regarding enaio®: OpenSSL

This information is updated periodically as soon as our analyses deliver new findings. Please check back periodically.

OpenSSL Components

Updating the OpenSSL components to version 3.0 is required for all subsequent enaio® hotfixes after September 2022 and absolutely must be done. If it is not, the functionality will no longer exist on the client and server side.

The OpenSSL components update must be performed for all affected components.

The file setup.inx is exchanged in the Setup directory (...\Win32\Disk1). If the entire setup with all directories is not downloaded, please make sure to manually import this file from the ...\SP\setup.inx\ directory into the setup directory. This file must not be copied into the SP directory itself. The setup can only be carried out using the updated setup.inx. If the OpenSSL files that were previously in the SP directory are still available after the download, make sure that they are deleted. This applies to:

• libssl-1_1.dll

• libcrypto-1_1.dll

There must be an OpenSSL Update directory in the SP directory so that the content of this directory is copied into the directories of existing server/client directories when performing a reinstallation, an update, or maintenance.

IMPORTANT: In addition to the 32-Bit product setup, the following new MSIs/setups are available for the OpenSSL libraries update and the affected components. These must also be updated in order to ensure that all the relevant enaio® components are equipped with the same OpenSSL versions.

• Client MSI as of version 9.10.0055 and later

• Capture MSI as of version 9.10.0025 and later

• Index Manager MSI as of version 9.10.0011 and later

• OSServerCommunication setup as of version 9.10.0004

• Server X64 as of patch 9.10.0040 and later

• Administration X64 MSI as of version 9.10.0021 and later

• enaio_search.msi version 9.10.5 and later (incl. new osssl.cfg)

Please contact us if you have any questions.