[quote user="Rolf Lindby"]Mercury 4.74 does not use OpenSSL, so it's not at risk. In the upcoming v. 4.80 there will be a corrected version of OpenSSL.[/quote]I know but i must use SSL. Without SSL get i no connection to my mail-provider and with SSL have I annoying crashes of Mercury32.

Hi All,

I just heard about this OpenSSL heartbleed bug:

http://heartbleed.com/

Is this relevant for Mercury and its SSL implementation as well and if so, what do we have to do in order to secure the application?

Thx

Konrad

This is relevant for the upcoming v. 4.80 of Mercury, and in fact already taken care of. 

While we waiting for a fix from David, i suggest to use https://www.stunnel.org.

Mercury 4.74 does not use OpenSSL, so it's not at risk. In the upcoming v. 4.80 there will be a corrected version of OpenSSL.

If so, make sure to use the latest stunnel v5.01 as the prior versions are affected as well!

Konrad