Date: Fri, 04 May 2012 08:38:06 +0100 From: Matthew Seaman <matthew@FreeBSD.org> To: Darrel <levitch@iglou.com> Cc: questions@FreeBSD.org Subject: Re: WITH_OPENSSL_PORT=yes Message-ID: <4FA3875E.10206@FreeBSD.org> In-Reply-To: <alpine.GSO.2.00.1205031720550.5132@shell1> References: <alpine.GSO.2.00.1205031720550.5132@shell1>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigA6AD7CCF55A79949735AA926 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 03/05/2012 21:22, Darrel wrote: > If WITH_OPENSSL_PORT=3Dyes exists in /etc/make.conf, will the system > compile against that as well or only applications? The base system always links against the copy of openssl in base irrespective of the WITH_OPENSSL_PORT setting: % grep WITH_OPENSSL_PORT /etc/make.conf WITH_OPENSSL_PORT=3D yes A sample application from the base that uses openssl: % ldd /usr/bin/ssh /usr/bin/ssh: [...] libcrypto.so.6 =3D> /lib/libcrypto.so.6 (0x8012dd000) [...] Whereas something installed from ports uses the ports version of openssl:= % ldd /usr/local/sbin/sendmail=09 /usr/local/sbin/sendmail: [...] libssl.so.8 =3D> /usr/local/lib/libssl.so.8 (0x800ce8000) libcrypto.so.8 =3D> /usr/local/lib/libcrypto.so.8 (0x800f4a000) [...] So, yes, you do need to update the system in the manner described in the recent FreeBSD-SA-12:01.openssl security advisory. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey --------------enigA6AD7CCF55A79949735AA926 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+jh2gACgkQ8Mjk52CukIyJ7ACfVRHjbLzPSXBd8hcqFYO/py7s ODcAn103Z0MMS10ct0rIlMi4Q2j0be4H =ojoI -----END PGP SIGNATURE----- --------------enigA6AD7CCF55A79949735AA926--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4FA3875E.10206>