From owner-freebsd-questions@FreeBSD.ORG Sat Mar 28 20:02:44 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E3C02138 for ; Sat, 28 Mar 2015 20:02:44 +0000 (UTC) Received: from plane.gmane.org (plane.gmane.org [80.91.229.3]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A02DFC7 for ; Sat, 28 Mar 2015 20:02:44 +0000 (UTC) Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1YbwwL-0003Ji-7Z for freebsd-questions@freebsd.org; Sat, 28 Mar 2015 21:02:41 +0100 Received: from pool-72-66-1-32.washdc.fios.verizon.net ([72.66.1.32]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sat, 28 Mar 2015 21:02:41 +0100 Received: from nightrecon by pool-72-66-1-32.washdc.fios.verizon.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sat, 28 Mar 2015 21:02:41 +0100 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-questions@freebsd.org From: Michael Powell Subject: Re: System based openssl Date: Sat, 28 Mar 2015 16:02:26 -0400 Lines: 54 Message-ID: References: <1912673295.20150327152451@agoris.net.ua> Reply-To: nightrecon@hotmail.com Mime-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7Bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: pool-72-66-1-32.washdc.fios.verizon.net X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Mar 2015 20:02:45 -0000 Subscriber wrote: > > Hi. > Witch version of system based OpenSSL last for FreeBSD 10.1? > > I have # uname -srm > FreeBSD 10.1-RELEASE-p8 amd64 > > # freebsd-version -ku > 10.1-RELEASE-p8 > 10.1-RELEASE-p8 > > # /usr/bin/openssl version > OpenSSL 1.0.1l-freebsd 15 Jan 2015 This is correct. This is what is currently in the system base. > But openssl.org says the last version OpenSSL in 1.0.1 tree is 1.0.1m > (19-Mar-2015) This would have to be imported into the system base. This involves developer time and effort. It is not quite trivial. There is also a newer OpenSSL in the ports tree. Version 1.0.2 if memory serves. I have seen bugs and problem reports filed against the 1.0.2 so I would be hesitant to just blindly 'install the port version' simply because it's newer. The FreeBSD devs do a pretty fair job at vetting what gets into the system base, and the resulting maintenance issues which arise from time to time. Trying to "outsmart" ones self with the delusion that I know more than they do is how many go about creating their own problems. > No OpenSSL files available during freebsd-update: > # freebsd-update fetch > Looking up update.FreeBSD.org mirrors... 5 mirrors found. > Fetching metadata signature for 10.1-RELEASE from update4.freebsd.org... > done. Fetching metadata index... done. > Inspecting system... done. > Preparing to download files... done. > > The following files will be updated as part of updating to > 10.1-RELEASE-p8: /boot/kernel/kernel > > What is wrong? > Thx. My first impression is nothing is wrong. You have what you're supposed to have. Other than that, I have never used freebsd-update so can't speak to anything relevant to that. -Mike