Date: Tue, 08 Apr 2014 23:18:21 +0200 From: Florent Peterschmitt <florent@peterschmitt.fr> To: Mark Boolootian <booloo@ucsc.edu>, Chris Nehren <cnehren+freebsd-security@pobox.com>, freebsd-security@freebsd.org Subject: Re: FreeBSD's heartbleed response Message-ID: <5344679D.4050707@peterschmitt.fr> In-Reply-To: <20140408192638.GA34745@funkthat.com> References: <20140408174210.GA5433@behemoth> <CAMCLrkFXsnY-_KCw2PF0VtY6C0J-4CL03GzFskXmzUtLL2Ebig@mail.gmail.com> <5344427B.3060205@peterschmitt.fr> <20140408192638.GA34745@funkthat.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] Do we need to fetch them from the Internet? Local packages can do the job, nope? But it will lead to kind of bootstrapping… or everything as packages bootstrapped once for all. And yes, it will not be some pie (a french stock phrase meaning it will be hard, translated word for word :) ). On 08/04/2014 21:26, John-Mark Gurney wrote: > Florent Peterschmitt wrote this message on Tue, Apr 08, 2014 at 20:39 +0200: >> On 08/04/2014 19:46, Mark Boolootian wrote: >>> While it may not be quite what you're looking for, ports contains >>> OpenSSL 1.0.1g. >> >> Why not moving critical parts of the basesystem to ports, that will be >> installed at system installation of course? > > Because we have programs in base that depend upon OpenSSL... so, > moving OpenSSL out of base is not really an option, unless you want > to remove fetch, hostapd, pkg, and wpa_supplicant from the base system, > we are stuck w/ OpenSSL in base... > > yes, there is pkg there, how are you going to fetch packages to install > if you don't have that? > > btw, all found w/ ldd /usr/bin/* /usr/sbin/* 2>/dev/null | less and > searching for libssl... > [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Icedove - http://www.enigmail.net/ iQIcBAEBAgAGBQJTRGedAAoJEFr01BkajbiBIPoP/RkdZ6kwv5w4z/WDGLmwk6Yp fLpDxRuzF4Z/7Qt4BBWmf5wMjAJZieJmO3QGfQwIuPVwjLAIWMbWdEX0eOCMWZDh 1Y3PiCrKJZYCHNSSpEBtZScwpi/RgEBbF30Jq7ZW5W0s2/veqQLB4/ChcSqcF6Y3 SR2CfsV3DaEQ8rs3LN2mDq5LUJ6tzub70UbOT8fW53ufm4PleTQjcsiBGj6uCV78 mfM8bJSn/FgvPpoSDfn/8/eOOXrz9KUT4xP5rfrxgNEmNfPTTEDv8kC7ItFvOj/w CLllkDJOXjgJoCBzVd6Mi3GyiwxDuZ4vrrjoC2DckeWwRYwABAjJuIr40Om8jI4q 8TNC7Ol9Sbu3b90VRufgXx+cyqMXxEVQzVUtJI0uJnYLdu/sTxLc6oiqAM+ayQTz G61lVcFZkcrnipj8w6fO4yD4OlFCLEzAxgAFu3mkwXzoKBPsiFi2FZkLLvRIPjFT Fxe3U3wq5ne0lG7MIXKH592L/RCPUm5p+WYEovYyhrGC3CCJOYCx7nMoFff1JAQm v6W67hetnonh6k2cd59PABlVyUM+wKdhmDFxKPuXy6/0nmn/7fmbTG9KOc/BlBa3 onuarPsNTe3ngQvnOQscof/e+gUb2Ed6Bi2OE6WaawdzR1LS/jotLcbH09h3fgK0 CrkqK2HxpXxtTqa7c5im =iyg9 -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5344679D.4050707>