KB - Heartbleed Fix for 64-bit Windows BBj ODBC Driver
Overview
Testing indicates that using the 64-bit Windows BBj ODBC Driver, installed with BBj version 13.13 or earlier, to connect to a remote BBj Services server over the Internet poses a small security risk (see the OpenSSL KB article) due to the Heartbleed bug. BASIS recommends that users upgrade to the 64-bit Windows BBj ODBC Driver installed with BBj 13.14 or higher. This is only necessary if you are already using the 64-bit Windows BBj ODBC Driver on a 64-bit Windows operating system.
This article describes how to update the 64-bit Windows ODBC Driver, which should be installed on a machine that is not currently running a version of BBj.
Updating the 64-bit Windows ODBC Driver
-
Go to links.basis.com/getbbj.
-
Select any package for BBj 13.14 or higher to download and mark the checkboxes under “Download Terms” that “I agree...” and “I understand..”
-
Begin the installation process by launching the jar file.
-
In “Language Selection”, click [Next>].
-
In “Welcome”, click [Next>].
-
In “License Agreement,” mark the radio button “I ACCEPT the terms…”, click [Next>].
-
In “Directory Selection”, optionally change the location, click [Next>].
-
In “JVM Selection”, click [Next>].
-
In “Installation Type Selection”, mark the radio button “Custom,” click [Next>].
-
In the “Feature Selection,” uncheck all BASIS Product Suite options except for “ODBC”.
-
Click [Next>] on the “Installation Summary” screen to start the installation.
-
Once the installation completes, copy the b3ssl.dll located in the \Windows\System32 directory to the \Windows\System32 directory in the target system.
-
Restart the system to load the new driver.
-
Note: Even though this is a 64-bit ODBC Driver dll, it will reside in the System32 directory.