OpenSSL upgrade

[sarath upadrista]

Hello,
     I am using shibboleth 2.5.0 version,ExternalIdp and a custom Service
Provider(Not Shibboleth SP) Recently, there were OpenSSL issues submitted
by openSSL group(refer:openssl_issues
<https://www.openssl.org/news/secadv_20150319.txt>).I am having few
questions on OpenSSL lib on shibboleth
- Is Shibboleth IDP using any openSSL libraries?
- If I upgrade my OpenSSL version, certificate on my tomcat server, Is it
required to upgrade the shibboelth IDP?
- Can I directly update the public key at the
'KeyDescriptor>ds:X509Certificate' element on idp-metadata.xml? Will it
effect any existing functionality?






Thanks & Regards,
Sarath U
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150326/e5aaaf11/attachment.html