From owner-freebsd-security@FreeBSD.ORG  Fri May 15 17:33:00 2015
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 0C245DBD
 for <freebsd-security@freebsd.org>; Fri, 15 May 2015 17:33:00 +0000 (UTC)
Received: from slim.berklix.org (slim.berklix.org [94.185.90.68])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 95E6B1AA9
 for <freebsd-security@freebsd.org>; Fri, 15 May 2015 17:32:58 +0000 (UTC)
Received: from mart.js.berklix.net (p5DCBD461.dip0.t-ipconnect.de
 [93.203.212.97]) (authenticated bits=128)
 by slim.berklix.org (8.14.5/8.14.5) with ESMTP id t4FHXcce006348;
 Fri, 15 May 2015 19:33:38 +0200 (CEST)
 (envelope-from jhs@berklix.com)
Received: from fire.js.berklix.net (fire.js.berklix.net [192.168.91.41])
 by mart.js.berklix.net (8.14.3/8.14.3) with ESMTP id t4FHWfuk052330;
 Fri, 15 May 2015 19:32:41 +0200 (CEST)
 (envelope-from jhs@berklix.com)
Received: from fire.js.berklix.net (localhost [127.0.0.1])
 by fire.js.berklix.net (8.14.7/8.14.7) with ESMTP id t4FHWNpJ031406;
 Fri, 15 May 2015 19:32:35 +0200 (CEST)
 (envelope-from jhs@berklix.com)
Message-Id: <201505151732.t4FHWNpJ031406@fire.js.berklix.net>
To: FreeBSD-security <freebsd-security@freebsd.org>
Subject: Re: Forums.FreeBSD.org - SSL Issue?
From: "Julian H. Stacey" <jhs@berklix.com>
Organization: http://berklix.com BSD Unix Linux Consultants, Munich Germany
User-agent: EXMH on FreeBSD http://berklix.com/free/
X-URL: http://www.berklix.com
In-reply-to: Your message "Thu, 14 May 2015 17:20:44 +0200."
 <C6A26209-6DB6-4842-9810-B670E3461AAE@patpro.net>
Date: Fri, 15 May 2015 19:32:23 +0200
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 15 May 2015 17:33:00 -0000

Patrick Proniewski <patpro@patpro.net> wrote:

> That's always the problem with guys like you and me who live in the real world. We can't cope with "what should be dead and no longer used". Deprecated tomcat/Java/SSL/You-name-it software that you can't just upgrade because it's used with hardware/software you can't get rid of.


FreeBSD needs more mature code management to restrict idealists, eg:

- src/ bsd tar : bad code rushed in too soon to replace Gnu (I filed fixes).
- ports/mail/majordomo : Deleted as mature!  An immature reason.
- ports/print/acroread9 deleted for security (so use chroot) & as Adobe
  support ceased (so use compat/).  Government would fine me lots
  of money & close down the company if I don't continue use of it.
- Those last two I will need to maintain outside FreeBSD.org.

Cheers,
Julian
--
Julian Stacey, BSD Linux Unix C Sys Eng Consultant Munich http://berklix.com
	Indent previous with "> ".	Reply Below as a play script.
	Send plain text, Not quoted-printable, HTML, or base64.