From owner-freebsd-hackers Fri Jun 21 10:38:52 2002 Delivered-To: freebsd-hackers@freebsd.org Received: from utility.clubscholarship.com (utility.clubscholarship.com [198.78.70.175]) by hub.freebsd.org (Postfix) with ESMTP id 41CE037B403 for ; Fri, 21 Jun 2002 10:38:48 -0700 (PDT) Received: from localhost (root@localhost) by utility.clubscholarship.com (8.11.6/8.11.6) with ESMTP id g5LHYgb43655; Fri, 21 Jun 2002 10:34:47 -0700 (PDT) (envelope-from root@utility.clubscholarship.com) Date: Fri, 21 Jun 2002 10:34:42 -0700 (PDT) From: Patrick Thomas To: Frank Mayhar Cc: "Brandon D. Valentine" , Kris Kennaway , Subject: Re: inuring FreeBSD to the apache bug without upgrading apache ? In-Reply-To: <200206211455.g5LEt6H2017408@realtime.exit.com> Message-ID: <20020621103256.C68572-100000@utility.clubscholarship.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG What none of you has mentioned is the thought I had in mind when I asked this question, and that is, I have a r&d machine with 16 jails on it, each running apache. Therefore in a situation like this it would be _much_ easier to just tune a sysctl or rebuild the kernel, vs. rebuilding 16 differently configured, different versions of apache. YMMV. --PT On Fri, 21 Jun 2002, Frank Mayhar wrote: > Brandon D. Valentine wrote: > > However, I would ask Frank if there's a particular reason he needs to > > use Covalent Raven SSL. OpenSSL is free, works like gangbusters, and > > comes with FreeBSD. I have a feeling he'd be much happier with it if > > there's not some other reason he cannot move to it. > > As I mentioned, the two reasons are (1) it hasn't been broken (at least > up to now) and (2) I haven't had time. These are colocated production > boxes; I don't have easy physical access to them to fix things if they > go seriously wrong, and having them be down for any length of time is a > Bad Thing. > -- > Frank Mayhar frank@exit.com http://www.exit.com/ > Exit Consulting http://www.gpsclock.com/ > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message