Date: Thu, 4 Oct 2007 16:29:12 +0100 From: Daniel Bye <freebsd-questions@slightlystrange.org> To: questions@freebsd.org Subject: Re: What is affected by FreeBSD-SA-07:08.openssl ? Message-ID: <20071004152911.GC1255@slightlystrange.org> In-Reply-To: <4704F974.4010801@dwinner.net> References: <8e10486b0710040653w291bb6e2h2a73cd41812b0b70@mail.gmail.com> <4704F974.4010801@dwinner.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--32u276st3Jlj2kUU
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, Oct 04, 2007 at 10:32:20AM -0400, Duane Winner wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>=20
> Alexandre Biancalana wrote:
> > Hi list,
> >=20
> > A quick:
> >=20
> > $ grep -lr SSL_get_shared_ciphers /usr/src 2> /dev/null
> > /usr/src/crypto/openssl/apps/s_client.c
> > /usr/src/crypto/openssl/apps/s_server.c
> > /usr/src/crypto/openssl/doc/ssleay.txt
> > /usr/src/crypto/openssl/doc/ssl/ssl.pod
> > /usr/src/crypto/openssl/ssl/ssl.h
> > /usr/src/crypto/openssl/ssl/ssl_lib.c
> > /usr/src/crypto/openssl/util/ssleay.num
> > /usr/src/secure/lib/libssl/man/ssl.3
> >=20
> > Doesn't revel much about what is affected by this bug.... Have someone =
made
> > some deeper analysis about what is affected ?
>=20
> Related question:
>=20
> Would any ports which may have been built based on openssl libraries
> (apache, stunnel, etc.) need to be rebuilt after this openssl patch?
I would think it would be sufficient just to restart any such ports,=20
rather than completely rebuild them, to ensure that the updated version
of the OpenSSL libs are loaded, and not the old broken ones.
However, it can't do any harm to rebuild, if you're that worried about it.
I'm sure someone will put me right if that's not the case, though.
Dan
--=20
Daniel Bye
_
ASCII ribbon campaign ( )
- against HTML, vCards and X
- proprietary attachments in e-mail / \
--32u276st3Jlj2kUU
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
iD8DBQFHBQbHixf5fBYiFmoRAjPuAKDBtZj9M/JELZVLTDIF7P+TW1o+SwCgtVYU
K+ipvp6i2gINU5xbrgHHfSw=
=wA1a
-----END PGP SIGNATURE-----
--32u276st3Jlj2kUU--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071004152911.GC1255>