Re: Re[2]: About the openssl hole

From: Scott Lambert (lambert@lambertfam.org)
Date: 07/30/02 

Date: Tue, 30 Jul 2002 14:17:39 -0400
From: Scott Lambert <lambert@lambertfam.org>
To: freebsd-security@FreeBSD.ORG

On Tue, Jul 30, 2002 at 07:52:54PM +0200, Dirk Meyer wrote:
> Geir RÜness wrote:
>
> > But as many know, the port of openssl will
> > not completly replace the core open ssl.
> > (You could see this if you build mod_ssl)
>
> apache13-modssl will see and use an installed
> port of openssl in /usr/local

But if you install the openssl port with -DOPENSSL_OVERWRITE_BASE, the
ports should simply see the "base" install of openssl and use it that
way, no?

Do openssl using programs need to be recompiled for library changes
between OpenSSL 0.9.6a and OpenSSL 0.9.6d? ssh, sendmail, postfix,
stunnel, various pop3 and imap daemons, apache, ....? 

-- 
Scott Lambert                    KC5MLE                       Unix SysAdmin
lambert@lambertfam.org      
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: Using Crypt::DSA
    ... which represents the latest FreeBSD port. ... > prefer to install from ports because, especially in the case of software ... If you have OpenSSL, you may get better ... Rob ...
    (comp.lang.perl.misc)
  • Re: broken openssl on freebsd60
    ... >> install the openssl port or at least they used to. ... > Another user had a similar issue like this with OpenSSL, ... that openssl is per default within the base system, ...
    (freebsd-questions)
  • Re: About the openssl hole
    ... the port of openssl will not completly replace the ... > have the NOC monkeys reboot them when the patch is here.... ... I recommend people install the OpenSSL ...
    (FreeBSD-Security)
  • ignoring openssl port
    ... I ended up with openssl port installed on these systems. ... and then "make install" the port. ... I have upgraded the base system to 4.8-RELEASE-p13, ...
    (freebsd-questions)
  • Re: Should I have 2 copies of OpenSSL?
    ... > If you have the OpenSSL port installed why don't you uninstall the port ... > install of OpenSSL and not to install OpenSSL as a dependency from ports. ... That seems to have done the trick, Russell; ...
    (freebsd-questions)