CAPKI6 in Siteminder r12.9 Components

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

Policy Server

LINUX:

/<Install_Dir>/CA/siteminder/CAPKI/CAPKI6/Linux/amd64/64/lib/libcaopenssl_ssl.so
/<Install_Dir>/CA/siteminder/CAPKI/CAPKI6/Linux/amd64/64/lib/libcaopenssl_crypto.so

WINDOWS:

<Install_Dir>\CA\siteminder\etpki-install\CAPKI6\Windows\amd64\64\lib\libcaopenssl_ssl.so
<Install_Dir>\CA\siteminder\etpki-install\CAPKI6\Windows\amd64\64\lib\libcaopenssl_crypto.so

Access Gateway Server

LINUX

/<Install_Dir>/CA/secure-proxy/agentframework/CAPKI/CAPKI6/Linux/amd64/64/lib/libcaopenssl_ssl.so
/<Install_Dir>/CA/secure-proxy/agentframework/CAPKI/CAPKI6/Linux/amd64/64/lib/libcaopenssl_crypto.so

WINDOWS

/<Install_Dir>\CA\secure-proxy\agentframework\CAPKI\CAPKI6\Windows\amd64\64\lib\libcaopenssl_ssl.so
/<Install_Dir>\CA\secure-proxy\agentframework\CAPKI\CAPKI6\Windows\amd64\64\lib\libcaopenssl_crypto.so

Environment

PRODUCT: Symantec Siteminder

COMPONENT: Policy Server & Access Gateway

VERSION: r12.9

OPERATING SYSTEM: Any

Cause

# strings libcaopenssl_ssl.so | grep "0.9.8"
# strings libcaopenssl_ssl.so | grep "3.0.0"
OPENSSL_3.0.0
tls13_aes128gcmsha256_id.30010
OPENSSL_3.0.0

 

Resolution

CAPKI file 'libcaopenssl_ssl.so' is showing the base openssl version 3.0.0 , Each CAPKI library shows the version details based on the latest update happened in the recent release. So the correct way of version checking for CAPKI is

siteminder/etpki-install/bin/openssl version

Policy Server

LINUX:

/<Install_Dir>/CA/siteminder/etpki-install/bin/openssl version

WINDOWS:

/<Install_Dir>\CA\secure-proxy\etpki-install/bin\openssl version

Access Gateway Server

LINUX

/<Install_Dir>/CA/secure-proxy/etpki-install/bin/openssl version

WINDOWS

/<Install_Dir>\CA\secure-proxy\etpki-install/bin\openssl version

This will give the correct version of the OpenSSL version used in CAPKI 6.