Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 17 May 2015 16:15:43 -0500
From:      Mark Felder <feld@FreeBSD.org>
To:        Roger Marquis <marquis@roble.com>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Forums.FreeBSD.org - SSL Issue?
Message-ID:  <1431897343.1957655.271052497.1254498A@webmail.messagingengine.com>
In-Reply-To: <cmu-lmtpd-340777-1431896926-0@sloti22t01>
References:  <CACRVPYOALi-V8D34zeJTYdSwHshYrqtttqVV3=aP8Yb6ZAxfyg@mail.gmail.com> <2857899F-802E-4086-AD41-DD76FACD44FB@modirum.com> <05636D22-BBC3-4A15-AC44-0F39FB265CDF@patpro.net> <20150514193706.V69409@sola.nimnet.asn.au> <F2460C80-969A-46DF-A44F-6C3D381ABDC3@patpro.net> <5554879D.7060601@obluda.cz> <1431697272.3528812.269632617.29548DB0@webmail.messagingengine.com> <5556E5DC.7090809@obluda.cz> <1431894012.1947726.271026057.54BB4786@webmail.messagingengine.com> <cmu-lmtpd-294856-1431895835-6@sloti22t01> <1431896211.1954759.271044297.00C7D719@webmail.messagingengine.com> <cmu-lmtpd-340777-1431896926-0@sloti22t01>

next in thread | previous in thread | raw e-mail | index | archive | help


On Sun, May 17, 2015, at 16:08, Roger Marquis wrote:
> Mark Felder wrote:
> >> Considering the time to write and test patches is the same in either case
> >> it is still an open question.
> 
> > Again, this is not possible. You can't just "replace" the base OpenSSL.
> > That port or package would also have to replace every binary and library
> > in the base system linked to an OpenSSL library such as libcrypt with a
> > version that was built against the updated OpenSSL.
> 
> Sure, when you must change the ABI you also have to rebuild linked libs
> and bins, but how many openssl 0.9 updates have required ABI changes?
> 
> Roger

This entire discussion has been about doing MAJOR updates to OpenSSL in
base. Updates that obviously require ABI changes. 

Please tell me about a feature change between FreeBSD 9.3's OpenSSL
0.9.8za and the latest compatible 0.9.8ze that validates a port for
OpenSSL that replaces base. I cannot find any that justify the effort.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1431897343.1957655.271052497.1254498A>