From owner-freebsd-security@FreeBSD.ORG Fri Jul 13 00:03:10 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C3C9D106566B; Fri, 13 Jul 2012 00:03:10 +0000 (UTC) (envelope-from jkim@FreeBSD.org) Received: from hammer.pct.niksun.com (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 5A2D38FC14; Fri, 13 Jul 2012 00:03:10 +0000 (UTC) Message-ID: <4FFF65BD.4060707@FreeBSD.org> Date: Thu, 12 Jul 2012 20:03:09 -0400 From: Jung-uk Kim User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:13.0) Gecko/20120626 Thunderbird/13.0.1 MIME-Version: 1.0 To: freebsd-current@freebsd.org References: <4FFF11CA.60004@FreeBSD.org> In-Reply-To: <4FFF11CA.60004@FreeBSD.org> X-Enigmail-Version: 1.4.2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: Ben Laurie , freebsd-security@freebsd.org Subject: Re: [HEADSUP] OpenSSL 1.0.1c merge in progress X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2012 00:03:10 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-07-12 14:04:58 -0400, Jung-uk Kim wrote: > OpenSSL 1.0.1c will be merged to head today. There will be > several important changes to note. > > - Several crypto/engine modules will be added or enabled by default > to closely match OpenSSL default, e.g., Camellia (crypto), SEED > (crypto), GOST (engine), etc. - MD2 will be removed because a) it > is disabled by default and b) we removed it from libmd. - Optimized > amd64 asm files will be added and enabled by default. - Optimized > i386 asm files will be updated and new files will be added. - > opensslconf.h for amd64 and i386 will be merged. > > Unfortunately, library versions will be bumped, i.e., > > libcrypto.so.6 -> libcrypto.so.7 libssl.so.6 -> libssl.so.7 > > Therefore, all binaries depending on these need to be recompiled. > Also, you may have to merge your /etc/ssl/openssl.conf changes. FYI, OpenSSL 1.0.1c import is complete now. Please let me know if you have any problem. Cheers, Jung-uk Kim -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk//Zb0ACgkQmlay1b9qnVMDXACgxjHtAdhyLasffkaqX/Jl9hHX He0An2EjtcRoNsHfTX/ZwZ+iHz2VW2Iq =mHkt -----END PGP SIGNATURE-----