Problem

How do I determine what version of OpenSSL the API Gateway is using?

Resolution

Run the openssl version command like so:

/opt/Axway/apigateway/posix/bin/vrun openssl version
OpenSSL 1.0.1j 15 Oct 2014

The API Gateway includes a bundled version of OpenSSL that is independent of the system's OpenSSL. You can find the copy used by the gateway under [install]/[platform]/lib/ where [install] is the location the API Gateway is installed (e.g. /opt/Axway/apigateway) and [platform] is your platform, for example, Linux_x64. The only supported way to update the OpenSSL version is to apply a patch or service pack that includes an updated OpenSSL version. We regularly update OpenSSL and patches will normally be available soon after any security advisory is released.

Note that OpenSSL could report a version of 0.9.8zb dev with certain patches. This was equivalent to the version OpenSSL 0.9.8za for security purposes. Both that OpenSSL version and those patches went EOL a long time ago.