Date: Sun, 17 May 2015 14:08:43 -0700 (PDT) From: Roger Marquis <marquis@roble.com> To: Mark Felder <feld@FreeBSD.org> Cc: freebsd-security@freebsd.org Subject: Re: Forums.FreeBSD.org - SSL Issue? In-Reply-To: <1431896211.1954759.271044297.00C7D719@webmail.messagingengine.com> References: <CACRVPYOALi-V8D34zeJTYdSwHshYrqtttqVV3=aP8Yb6ZAxfyg@mail.gmail.com> <2857899F-802E-4086-AD41-DD76FACD44FB@modirum.com> <05636D22-BBC3-4A15-AC44-0F39FB265CDF@patpro.net> <20150514193706.V69409@sola.nimnet.asn.au> <F2460C80-969A-46DF-A44F-6C3D381ABDC3@patpro.net> <5554879D.7060601@obluda.cz> <1431697272.3528812.269632617.29548DB0@webmail.messagingengine.com> <5556E5DC.7090809@obluda.cz> <1431894012.1947726.271026057.54BB4786@webmail.messagingengine.com> <cmu-lmtpd-294856-1431895835-6@sloti22t01> <1431896211.1954759.271044297.00C7D719@webmail.messagingengine.com>
| previous in thread | raw e-mail | index | archive | help
Mark Felder wrote: >> Considering the time to write and test patches is the same in either case >> it is still an open question. > Again, this is not possible. You can't just "replace" the base OpenSSL. > That port or package would also have to replace every binary and library > in the base system linked to an OpenSSL library such as libcrypt with a > version that was built against the updated OpenSSL. Sure, when you must change the ABI you also have to rebuild linked libs and bins, but how many openssl 0.9 updates have required ABI changes? Roger
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?>