Installing HP SSL for OpenVMS

If both a Table of Contents and Search form are not displayed in separate frames along with this one, you may wish to redisplay this book in a frameset, beginning with the first page.

HP Open Source Security for OpenVMS Volume 2:...

Installation and Release Notes

OpenSSL Documentation from The Open Group

Postinstallation Tasks

Installing HP SSL for OpenVMS

HP SSL for OpenVMS is included with the Layered Products distribution, and is also available for download from the HP SSL web site at

http://h71000.www7.hp.com/openvms/products/ssl/

You must install HP SSL before you can use it. Use the following procedure to install HP SSL for OpenVMS.

If you have a previous version of HP SSL installed, you must manually remove it before installing HP SSL Version 1.2. Be sure to preserve the SSL configuration files OPENSSL-VMS.CNF and OPENSSL.CNF (if you modified them) by copying them to another disk and directory before removing HP SSL.

To remove a previous version of HP SSL, enter the following command:


 
$ PRODUCT REMOVE SSL

Before installing HP SSL to a common system disk in a cluster, shut down HP SSL on each node in the cluster.

Install the HP SSL for OpenVMS kit by entering the following command:

$ PRODUCT INSTALL SSL/SOURCE=ddcu:[dir]

By default, HP SSL for OpenVMS is installed into SYS$SYSDEVICE:[VMS$COMMON]. You can specify a different installation location by using the PRODUCT INSTALL command line qualifier /DESTINATION. (Beginning with HP SSL Version 1.2, you can install HP SSL on a non-system disk as well as a system disk.)

For a description of the features you can request with the PRODUCT INSTALL command when starting an installation, such as running the IVP, purging files, and configuring the installation, refer to the POLYCENTER Software Installation Utility User's Guide.

As the deinstallation and installation procedures progress, the system displays information similar to the following output.

Specifying the /HELP qualifier on the PRODUCT INSTALL command line displays additional information about HP SSL.

$ PRODUCT REMOVE SSL
 
The following product has been selected:
    CPQ AXPVMS SSL V1.1-B                  Layered Product
 
Do you want to continue? [YES]
 
The following product will be removed from destination:
    CPQ AXPVMS SSL V1.1-B                  DISK$DWLLNG_A_V73:[VMS$COMMON.]
 
Portion done: 0%...10%...20%...30%...40%...50%...60%...70%...80%...90%...100%
 
The following product has been removed:
    CPQ AXPVMS SSL V1.1-B                  Layered Product
 
$ PRODUCT INSTALL SSL/SOURCE=DKA500:[KITS]/HELP
 
The following product has been selected:
    HP AXPVMS SSL V1.2                     Layered Product
 
Do you want to continue? [YES]
 
Configuration phase starting ...
 
You will be asked to choose options, if any, for each selected product and for any products that may be installed to satisfy software dependency requirements.
 
HP AXPVMS SSL V1.2: SSL for OpenVMS Alpha V1.2 (Based on OpenSSL 0.9.7d).
 
    © Copyright 2004 Hewlett-Packard Development Company, L.P.
 
Do you want the defaults for all options? [YES]
 
Do you want to review the options? [NO]
 
Execution phase starting ...
 
The following product will be installed to destination:
    HP AXPVMS SSL V1.2                     DISK$TOPAZ:[VMS$COMMON.]
 
Portion done: 0%...10%...20%...30%...40%...50%...60%...70%...80%...90%...100%
 
The following product has been installed:
    HP AXPVMS SSL V1.2                     Layered Product
 
%PCSI-I-IVPEXECUTE, executing test procedure for HP AXPVMS SSL V1.2 ... %PCSI-I-IVPSUCCESS, test procedure completed successfully
 
HP AXPVMS SSL V1.2: SSL for OpenVMS Alpha V1.2 (Based on OpenSSL 0.9.7d).
 
    Insert the following lines in SYS$MANAGER:SYSTARTUP_VMS.COM:
        @pcsi$destination:[sys$startup]ssl$startup.com
    Insert the following lines in SYS$MANAGER:SYSHUTDWN.COM:
        @pcsi$destination:[sys$startup]ssl$shutdown.com
 
    There are post installation activities that need to be performed.
 
    This includes the following items that are described in detail:
 
        - ensuring SSL startup and logical names creation files
          are executed
 
        - updating or copying the necessary startup, shutdown and
          configuration files from the installed template files
 
        - running the Installation Verification Program (IVP)
 
    Refer to the SSL release notes and the OpenVMS SSL documentation for
    more information about activities that should be performed once the
    installation has finished.
 
    SSL has created the following directory structure and files in
    PCSI$DESTINATION, which defaults to SYS$SYSDEVICE:[VMS$COMMON]:
 
        [SSL]                 Top-level SSL directory
        [SSL.ALPHA_EXE]       Contains the images for the Alpha platform
        [SSL.COM]             Directory to hold the various command procedures
        [SSL.DEMOCA]          Directory structure to demo SSL's CA features
        [SSL.DEMOCA.CERTS]    Directory to hold the certificates and keys
        [SSL.DEMOCA.CONF]     Contains the configuration files
        [SSL.DEMOCA.CRL]      Contains revoked certificates and CRLs
        [SSL.DEMOCA.PRIVATE]  Directory for private keys and random data
        [SSL.DOC]             OpenSSL.org provided documentation & information
        [SSL.INCLUDE]         Contains the C Header (.H) files
        [SSL.TEST]            Contains the files used during the IVP
 
        [SYS$STARTUP]         Startup and shutdown templates and files
        [SYSHLP]              Release notes
        [SYSHLP.EXAMPLES.SSL] SSL crypto and secure session examples
        [SYSLIB]              SSL shareable image files
        [SYSTEST]             SSL$IVP.COM test files
 
 
 
    Upgrading HP SSL from a previous version requires the following:
 
 
    The SSL release notes provide information to copy the SSL startup,
    shutdown, and configuration template files, renaming them to their
    respective file. A product upgrade or re-installation will not overwrite
    or create a new file version if the file has been modified. It will only
    create the template files. It is suggested that you review these files
    for any changes.
 
    For more information, refer to the SSL Release Notes and other SSL
    files using the system logical name definitions, or the subdirectory of
    the PCSI destination device and directory.
 
 
    $ TYPE SYS$HELP:SSL012.RELEASE_NOTES
 
    - or - [.SYSHLP]SSL012.RELEASE_NOTES
 
    $ @SYS$STARTUP:SSL$STARTUP.COM should be run at system startup,
 
    - or - [.SYS$STARTUP]SSL$STARTUP.COM
 
    System managers should modify site-specific requirements in SSL files:
 
    SSL$COM:SSL$SYSTARTUP.COM
 
    SSL$COM:SSL$SYSHUTDOWN.COM

Stopping and Restarting the Installation

Use the following procedure to stop and restart the installation:

To stop the procedure at any time, press Ctrl/Y.

Enter the DCL command PRODUCT REMOVE SSL to reverse any changes to the system that occurred during the partial installation. This deletes all files created up to that point and causes the installation procedure to exit.

To restart the installation, go back to the beginning of the installation procedure.

OpenSSL Documentation from The Open Group

Postinstallation Tasks