From owner-freebsd-questions@FreeBSD.ORG Mon Nov 15 14:11:43 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6BC8C106564A for ; Mon, 15 Nov 2010 14:11:43 +0000 (UTC) (envelope-from indexer@internode.on.net) Received: from mail.internode.on.net (bld-mail13.adl6.internode.on.net [150.101.137.98]) by mx1.freebsd.org (Postfix) with ESMTP id B57E78FC0A for ; Mon, 15 Nov 2010 14:11:42 +0000 (UTC) Received: from mai.dhcp.chocolate.lan (unverified [203.122.194.109]) by mail.internode.on.net (SurgeMail 3.8f2) with ESMTP id 46694241-1927428 for ; Tue, 16 Nov 2010 00:41:41 +1030 (CDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Apple Message framework v1082) From: Indexer In-Reply-To: <20101115090851.237f167b@scorpio> Date: Tue, 16 Nov 2010 00:41:32 +1030 Content-Transfer-Encoding: quoted-printable Message-Id: <81515984-72F4-4CD1-AD9F-2CE7EDF944B2@internode.on.net> References: <20101115090851.237f167b@scorpio> To: FreeBSD X-Pgp-Agent: GPGMail 1.2.3 X-Mailer: Apple Mail (2.1082) Subject: Re: openssl version - how to verify X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 14:11:43 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 16/11/2010, at 00:38, Jerry wrote: > On Mon, 15 Nov 2010 16:17:10 +0300 > c0re articulated: >=20 >> If I look at base openssl in 7.3-RELEASE-p3 >>=20 >> sys# openssl version -a >> OpenSSL 0.9.8e 23 Feb 2007 >> built on: Mon Sep 27 11:54:36 MSD 2010 >> platform: FreeBSD-i386 >> options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) >> blowfish(idx) compiler: cc >> OPENSSLDIR: "/etc/ssl" >>=20 >> but at www.openssl.org I see that it's not recent version >>=20 >> 01-Jun-2010: OpenSSL 0.9.8o is now available, including >> important bug and security fixes >>=20 >> I know that freebsd security team make patches for base openssl, but >> how can I know what patchlevel of openssl in base version? >>=20 >> Like "-p5" in "OpenSSL 0.9.8e-p5 23 Feb 2007". >=20 > Why not just install the ports version: It breaks alot, and causes you to need to rebuild some parts of the base = system. The most notable, is SSHD, which whenever I install the openssl = from ports, will not work unless i rebuild SSHD or, remove the ports = version. >=20 > openssl version -a=20 > OpenSSL 1.0.0a 1 Jun 2010 > built on: Sun Jun 6 12:19:12 EDT 2010 > platform: BSD-x86_64 > options: bn(64,64) rc4(8x,int) des(idx,cisc,16,int) idea(int) = blowfish(idx)=20 > compiler: cc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB = -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN = -DTERMIOS -O3 -DMD32_REG_T=3Dint -Wall -O2 -pipe -march=3Dathlon64 = -fno-strict-aliasing -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT = -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DWHIRLPOOL_ASM > OPENSSLDIR: "/usr/local/openssl" >=20 > You would need to add this to the "/etc/make.conf" file first I = believe: >=20 > WITH_OPENSSL_PORT=3Dyes >=20 > --=20 > Jerry =E2=9C=8C > FreeBSD.user@seibercom.net >=20 > Disclaimer: off-list followups get on-list replies or get ignored. > Please do not ignore the Reply-To header. > __________________________________________________________________ > Fat Liberation: because a waist is a terrible thing to mind. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org" William Brown pgp.mit.edu -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iQIcBAEBAgAGBQJM4T+aAAoJEHF16AnLoz6JNjsP/iK5wpZqSnQzkPpnjusBDUTG emCG8MJw7191ovvLjREbwzQjdjRFm8iGnkXcFgQabatI24Ks5WP8bR88PzYShDG7 h2kFBcmfqftnEfeWmvdjTxpE6hSxzN6291Zew4O36RMraEY/RHAUZjblB5Bu1IgS XSrOJ1ETQNXS54eMTctf6erpX1ASgGq2kGRcXGCBbqTN8smUoGtz06GiNsYzS9Qk 7iytF8kpUMpqmKoV/Os07ETcmoRTwbAgv6J7IL0nS7kTN+8BYgUY5vxL/+pRHN+Y YiXWKHgK4VCz3fW5NXQddDR1I/6clDK0ZfSDnZdHOHjkMrjTMdlzIz2OTMtkF9Z+ saQm1m78/or1FXBNXfzUhvKd3UnAoJC0PpndZTzrwiB7huJiAvvD0AJdvNyzPtM2 V7DuDY9zrBRmB5DDr1HQEEqgTRI1ZzdXo5uPwUM+RctOsxYDFvF8MFqs/eC3z9Vz PFxHX/uIbEAC6IdrkwhyVOQR1vup8U/bwgLiXDK9y82oQdksNBYbU1EWh2nanaPH CJj9WJNn2suNrYouTRhTDnCVxl0hbAgYT7w5CEfRAx8s3g82sZ+/evJutr2U7tHW /LzwoY9qyWn19t6dqMw+kENsGDKPzXkFIQ9txi5XIH8bgUKeOhJQE610uMSPvmB8 zDwJ4bEaIUzjhasCKjNS =3Dc5mr -----END PGP SIGNATURE-----