From owner-freebsd-security@FreeBSD.ORG Wed Apr 6 14:48:39 2011 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8B4F91065672 for ; Wed, 6 Apr 2011 14:48:39 +0000 (UTC) (envelope-from cameron@ctc.com) Received: from pm2.ctc.com (pm2.ctc.com [147.160.99.125]) by mx1.freebsd.org (Postfix) with ESMTP id 4F94D8FC12 for ; Wed, 6 Apr 2011 14:48:38 +0000 (UTC) Received: from server3a.ctc.com (server3a.ctc.com [10.160.17.12]) by pm2.ctc.com (8.13.1/8.13.1) with ESMTP id p36EmPWt009579 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 6 Apr 2011 10:48:25 -0400 Received: from linux116.ctc.com (linux116.ctc.com [10.160.39.116]) by server3a.ctc.com (8.13.1/8.13.1) with ESMTP id p36EmbZK027346; Wed, 6 Apr 2011 10:48:37 -0400 Received: (from cameron@localhost) by linux116.ctc.com (8.13.8/8.13.8/Submit) id p36Emb2h008722; Wed, 6 Apr 2011 10:48:37 -0400 X-Authentication-Warning: linux116.ctc.com: cameron set sender to cameron@ctc.com using -f From: "Frank J. Cameron" To: Scot Hetzel In-Reply-To: References: <1302042612.3271.100.camel@linux116.ctc.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Organization: Concurrent Technologies Corp. Date: Wed, 06 Apr 2011 10:48:37 -0400 Message-Id: <1302101317.3271.146.camel@linux116.ctc.com> Mime-Version: 1.0 X-Mailer: Evolution 2.12.3 (2.12.3-19.el5) Cc: freebsd-security Subject: Re: SSL is broken on FreeBSD X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2011 14:48:39 -0000 On Wed, 2011-04-06 at 10:43 -0400, Scot Hetzel wrote: > > http://svn.freebsd.org/viewvc/base/stable/8/crypto/openssl/Makefile > > OPENSSLDIR=/usr/local/ssl > > > FreeBSD doesn't use the crypto/openssl/Makefile when building OpenSSL > as part of a buildworld, instead we use our own custom Makefiles in > secure/lib/libcrypto. The only place where OPENSSLDIR is defined is > in secure/lib/libcrypto/opensslconf-${MACHINE_CPUARCH}.h > > http://svn.freebsd.org/viewvc/base/head/secure/lib/libcrypto/opensslconf-amd64.h?revision=194207&view=markup > > #if !(defined(VMS) || defined(__VMS)) /* VMS uses logical names > instead */ > #if defined(HEADER_CRYPTLIB_H) && !defined(OPENSSLDIR) > #define ENGINESDIR "/usr/lib/engines" > #define OPENSSLDIR "/etc/ssl" > #endif > #endif Cool, thanks; I thought I might have been looking in the wrong place. ------------------------------------------------------------ This message and any files transmitted within are intended solely for the addressee or its representative and may contain company sensitive information. If you are not the intended recipient, notify the sender immediately and delete this message. Publication, reproduction, forwarding, or content disclosure is prohibited without the consent of the original sender and may be unlawful. Concurrent Technologies Corporation and its Affiliates. www.ctc.com 1-800-282-4392 ------------------------------------------------------------