From owner-freebsd-questions@FreeBSD.ORG Mon Nov 15 14:08:56 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DE6D2106566B for ; Mon, 15 Nov 2010 14:08:55 +0000 (UTC) (envelope-from freebsd.user@seibercom.net) Received: from mail-yx0-f182.google.com (mail-yx0-f182.google.com [209.85.213.182]) by mx1.freebsd.org (Postfix) with ESMTP id 8F3AB8FC18 for ; Mon, 15 Nov 2010 14:08:55 +0000 (UTC) Received: by yxe1 with SMTP id 1so1025702yxe.13 for ; Mon, 15 Nov 2010 06:08:55 -0800 (PST) Received: by 10.151.27.9 with SMTP id e9mr9503181ybj.229.1289830134905; Mon, 15 Nov 2010 06:08:54 -0800 (PST) Received: from scorpio.seibercom.net (cpe-071-077-039-064.nc.res.rr.com [71.77.39.64]) by mx.google.com with ESMTPS id t9sm3104640ybe.9.2010.11.15.06.08.53 (version=TLSv1/SSLv3 cipher=RC4-MD5); Mon, 15 Nov 2010 06:08:54 -0800 (PST) Received: from scorpio (zeus [192.168.1.1]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: FreeBSD.user@scorpio.seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 4D8BCE54856 for ; Mon, 15 Nov 2010 09:08:52 -0500 (EST) Date: Mon, 15 Nov 2010 09:08:51 -0500 From: Jerry To: FreeBSD Message-ID: <20101115090851.237f167b@scorpio> In-Reply-To: References: Organization: seibercom.net X-Mailer: Claws Mail 3.7.6 (GTK+ 2.20.1; amd64-portbld-freebsd8.1) Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAJFBMVEUeH4oAAI3//v8LDHmw s8gyNZ/b3ej7+vn+/v////+PjIc8Plaj/TnQAAACNElEQVQ4jaXUvW/aQBQAcFtKGZLFT+YY 3D1SR9SKoRMncE3IggU4kicGi1JYOgQwyYrgnLlSzhsoNkTuVJEp+ef6ztiAoV3aJ+QPfufn s987S/5fQvoXYPjztmfc514Ks+5JfGUCfrzt4+VabF+jwEV4DGEXN8N4p16sPLxHX07/V3qX yfF5D2H6K4V8j9NkyAphvkjBembD5PDFk3zeTzP1jcksyaV9w+d4ELmUoOp8N2p8uQVyhTAT uawnKNH2mie5lJp48mscUcbJUvg0mR6APwAoye9AMyWozY4gAh0vcxa5FJ4TKCuODESWtfkB 8AEQSupUXNIYH8FSC2w8X3eMBNbbVJpJ7MgECO5yJ9DUEWCYkzNAlsRsgwLQ1GkWqELbkDOh 1bUzoHagYkNh9MXlK/MQoA42gTxz2bhPM2DJedm8MZx6cNfJgEZJ5cmwPp5FZ/Ye8O2qTrFV dgOrHkZRBoheJiGrRquwAhnQ6GeTePPerWVmQelAQ5lwNqtvQd2lcooAV74/zR1BIRS19fy5 ru+B/8ReW9pYKMPjt609zDaitHHTGOO+Zu7gHvsKE7XbeE1QVuJXomIFuZgUJdXQdhpqEELc /e8RLjfi+cQ01yMdWot8UcCVxEWHEkcUrsDGuhaIEoM9kfgAR6jxHcmEV7tNURAl8KTHN9iF McKGFHGO62O62UMpbmlVuogQ7ndL8zXCiLeBy3xpfrqaXS/+AHDG4o8AvhuPeezD/3xL/hy/ Adjlg2odglF2AAAAAElFTkSuQmCC Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: Re: openssl version - how to verify X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: FreeBSD List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 14:08:56 -0000 On Mon, 15 Nov 2010 16:17:10 +0300 c0re articulated: > If I look at base openssl in 7.3-RELEASE-p3 > > sys# openssl version -a > OpenSSL 0.9.8e 23 Feb 2007 > built on: Mon Sep 27 11:54:36 MSD 2010 > platform: FreeBSD-i386 > options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) > blowfish(idx) compiler: cc > OPENSSLDIR: "/etc/ssl" > > but at www.openssl.org I see that it's not recent version > > 01-Jun-2010: OpenSSL 0.9.8o is now available, including > important bug and security fixes > > I know that freebsd security team make patches for base openssl, but > how can I know what patchlevel of openssl in base version? > > Like "-p5" in "OpenSSL 0.9.8e-p5 23 Feb 2007". Why not just install the ports version: openssl version -a OpenSSL 1.0.0a 1 Jun 2010 built on: Sun Jun 6 12:19:12 EDT 2010 platform: BSD-x86_64 options: bn(64,64) rc4(8x,int) des(idx,cisc,16,int) idea(int) blowfish(idx) compiler: cc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIOS -O3 -DMD32_REG_T=int -Wall -O2 -pipe -march=athlon64 -fno-strict-aliasing -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DWHIRLPOOL_ASM OPENSSLDIR: "/usr/local/openssl" You would need to add this to the "/etc/make.conf" file first I believe: WITH_OPENSSL_PORT=yes -- Jerry ✌ FreeBSD.user@seibercom.net Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________ Fat Liberation: because a waist is a terrible thing to mind.