Uninstall OpenSSL


 
Thread Tools Search this Thread
Operating Systems HP-UX Uninstall OpenSSL
# 1  
Old 03-30-2017
Uninstall OpenSSL

We have a legacy HP-UX 11.11 server that has a number of security vulnerabilities associated with OpenSSL. We have a project in the works to replace this server but until then I need to deal with the vulnerabilities. No applications on the server utilize SSL, so my plan was to simply remove it. However, when I mark OpenSSL for removal I get a long list of dependencies, including the following:

SysMgmtHomepage
EMS-Core
IOTree-Provider
LVM-Provider
SCSI-Provider
WBEMP Services

Is it actually feasible to remove OpenSSL without breaking other things? Any advise or thoughts greatly appreciated.
Thanks,
Joe
# 2  
Old 03-30-2017
HPUX system management home page (SMH) uses SSL.
Also, there is whole subsystem to handle that among other things.

That stuff listed are various providers for WBEM, LVM which provide information about those subsystem, but are not involved in their functioning.
So systems like HPSIM can get information via WBEM over network about the machine.
Or SMH web interface can be used to administer the system via clicking the browser.

If you are having issues with security scans showing that, you can disable SMH (if you don't use it).

Now your server listenes on various ports (80,443,2301..) due to that service being active.
Security scans will find out about openssl weakness if that service is up.

If stopped/disabled, nothing will pop out regarding that subject. No uninstall is required.
The smh utility from command line should still work.

Have you consider rather upgrading the OS ?
HPUX v1 is a really old operating system.

Hope that helps
Regards
Peasant.
# 3  
Old 04-03-2017
Peasant,
Thanks for the reply. We do have an upgrade project in the works but it's a couple months out from completion.
Can I simply disable all web services without uninstalling anything? Our ERP system does not use any web or SSL services.
Thanks,
Joe
# 4  
Old 06-29-2017
Finally getting back to this issue. Can anyone tell me how to disable/stop OpenSSL, or at least stop it from listening on port 443?
Thanks,
Joe
# 5  
Old 06-29-2017
That would come down to your web server, what is it?
# 6  
Old 07-05-2017
The webserver is Apache. Not sure of the full version but the OS is 11.11.
Thanks,
Joe
# 7  
Old 07-07-2017
Corona688, any thoughts on this? I appreciate any help!
Thanks,
Joe
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

debuginfo-install, how to uninstall?

I used the following command: $debuginfo-install glibc-2.12.90-17.i686 it is helpful when using gdb, but now I don't need it. How to uninstall the debuginfo packet? (2 Replies)
Discussion started by: vistastar
2 Replies

2. Solaris

how to uninstall the package help

hi i installed wine1.1.2-sol11-i386.pkg.bz2 but wine doesnt work error err:process:start_wineboot failed to start wineboot, err 1359 how can i uninstall that package and how can i fix that error (2 Replies)
Discussion started by: ect1
2 Replies

3. AIX

Uninstall a relocatable package

Hi, If a package has been installed at normal location: installp -u <package_name> uninstalls the package However, if that has been installed relocatable, the above command fails. It requires the relocatable path as the parameter installp -R <relocation_path> -u <package_name> To find... (1 Reply)
Discussion started by: vibhor_agarwali
1 Replies

4. AIX

uninstall NIM

Hello I have a NIM installation on a production server database. I know that this is not the best. for that I want to uninstall the nim and put on another machine. Im not install this NIM on the production server. My question is only uninstall with smitty and delete the filesystems and... (1 Reply)
Discussion started by: lo-lp-kl
1 Replies

5. Solaris

Perl - How to uninstall? Will pkgrm uninstall all versions?

Hello, I'm working on a Solaris 9/Sparc machine and it has the Solaris 10 version of Perl (5.8.8) installed on it, which always requires all kinds of library files that Solaris 9 doesn't come with. I think the best way to do is to uninstall this wrong version and install the correct Solaris 9... (1 Reply)
Discussion started by: alanlh
1 Replies

6. Solaris

Uninstall Apache 1.3.37

I have installed apache on solaris 8. May I know how do i uninstall it? :confused: thanks. (1 Reply)
Discussion started by: sagolo
1 Replies

7. BSD

uninstall BootManager

Hi, I have installed FreeBSD in coexistance with windoze...now i want to uninstall it!how can i do that? Is it possible to just format the partition it was on ( problem with this i thing is that BootManager resides on the disk...how to fix this problem?!!!) thank you for help mohamed (8 Replies)
Discussion started by: hmaiida
8 Replies

8. Linux

uninstall xinetd

hey, haha it's me agian, i think that my xinetd is messed up, i am unable to stop it. I can start it though...lol. I just wonderd how can i uninstall it so i can reinstall it...maybe this time it'll work. I'm running RH 7.1 i think. thanks:) (5 Replies)
Discussion started by: byblyk
5 Replies

9. UNIX for Dummies Questions & Answers

how do u uninstall apache

i am running redhat 7.3 how do i unistall apache if i installed from a tarball? really need to know this thanx (8 Replies)
Discussion started by: matt2kjones
8 Replies

10. UNIX for Dummies Questions & Answers

uninstall command

I am trying to uninstall some software from a system running Compaq Tru64 UNIX v4.0e (was Digital UNIX). I can't find the correct "uninstall" command. I've tried uninstall, pkgrm, removepkg unsuccessfully. Does anyone know the command? Specifically, I had a problem with the installation of the... (3 Replies)
Discussion started by: bscottiii
3 Replies
Login or Register to Ask a Question