From owner-freebsd-current@FreeBSD.ORG Wed Jul 25 16:17:26 2012 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 3E2B41065670 for ; Wed, 25 Jul 2012 16:17:26 +0000 (UTC) (envelope-from oleg.moskalenko@citrix.com) Received: from SMTP02.CITRIX.COM (smtp02.citrix.com [66.165.176.63]) by mx1.freebsd.org (Postfix) with ESMTP id EF6008FC08 for ; Wed, 25 Jul 2012 16:17:25 +0000 (UTC) X-IronPort-AV: E=Sophos;i="4.77,653,1336363200"; d="scan'208";a="203197595" Received: from sjcpmailmx01.citrite.net ([10.216.14.74]) by FTLPIPO02.CITRIX.COM with ESMTP/TLS/RC4-MD5; 25 Jul 2012 12:17:19 -0400 Received: from SJCPMAILBOX01.citrite.net ([10.216.4.72]) by SJCPMAILMX01.citrite.net ([10.216.14.74]) with mapi; Wed, 25 Jul 2012 09:17:18 -0700 From: Oleg Moskalenko To: 'Anton Shterenlikht' , "freebsd-current@freebsd.org" Date: Wed, 25 Jul 2012 09:17:17 -0700 Thread-Topic: openssl upgrade, libcrypto, libssl confusion Thread-Index: Ac1qWP/ge9oF9xGlSI6sdrGlCR2jcwAJzkrQ Message-ID: <031222CBCF33214AB2EB4ABA279428A3012CA39FE6E6@SJCPMAILBOX01.citrite.net> References: <20120725113029.GA11089@mech-cluster241.men.bris.ac.uk> In-Reply-To: <20120725113029.GA11089@mech-cluster241.men.bris.ac.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: Subject: RE: openssl upgrade, libcrypto, libssl confusion X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jul 2012 16:17:26 -0000 Anton,=20 I use mostly static openssl libraries, but I suppose it applies to the dyna= mic ones, too: with any OpenSSL version (including 1.0.1c), you need libcry= pto and libssl. With the new OpenSSL version, you need the new library vers= ions, and you must recompile your binary code to use the new dynamic librar= ies (because there probably some headers incompatibilities between the vers= ions). You just misunderstood the release notes. Do not delete the library,= just re-install the new version. Regards, Oleg > -----Original Message----- > From: owner-freebsd-current@freebsd.org [mailto:owner-freebsd- > current@freebsd.org] On Behalf Of Anton Shterenlikht > Sent: Wednesday, July 25, 2012 4:30 AM > To: freebsd-current@freebsd.org > Subject: openssl upgrade, libcrypto, libssl confusion >=20 > In /usr/src/UPDATING I see >=20 > 20120712: > The OpenSSL has been upgraded to 1.0.1c. Any binaries > requiring > libcrypto.so.6 or libssl.so.6 must be recompiled. Also, there > are > configuration changes. Make sure to merge /etc/ssl/openssl.cnf. >=20 > Looking at this: >=20 > # make -C /usr/src check-old-libs > >>> Checking for old libraries > /lib/libcrypto.so.6 > /usr/lib/libssl.so.6 > # >=20 > Am I correct that these 2 libraries can be safely deleted? >=20 > However, I can't see any version 7 of these libs. > Have these libs been replaced by some other lib? >=20 > Finally, I've rebuilt mail/fetchmail and mail/mutt > already several times, but the binaries still > use these 2 libs: >=20 > TZAV> ldd /usr/local/bin/mutt > /usr/local/bin/mutt: > libncursesw.so.8 =3D> /lib/libncursesw.so.8 (0x1202f6000) > libgssapi.so.10 =3D> /usr/lib/libgssapi.so.10 (0x1203aa000) > libheimntlm.so.11 =3D> /usr/lib/libheimntlm.so.11 (0x1203ca000) > libkrb5.so.11 =3D> /usr/lib/libkrb5.so.11 (0x1203e4000) > libhx509.so.11 =3D> /usr/lib/libhx509.so.11 (0x1204c6000) > libcom_err.so.5 =3D> /usr/lib/libcom_err.so.5 (0x120550000) > libcrypto.so.6 =3D> /lib/libcrypto.so.6 (0x120562000) > ^^^^^^^^^^^^^^^ > libasn1.so.11 =3D> /usr/lib/libasn1.so.11 (0x120812000) > libwind.so.11 =3D> /usr/lib/libwind.so.11 (0x120918000) > libheimbase.so.11 =3D> /usr/lib/libheimbase.so.11 (0x120952000) > libroken.so.11 =3D> /usr/lib/libroken.so.11 (0x120968000) > libcrypt.so.5 =3D> /lib/libcrypt.so.5 (0x120996000) > libssl.so.6 =3D> /usr/lib/libssl.so.6 (0x1209d0000) > ^^^^^^^^^^^^^^^ > libz.so.6 =3D> /lib/libz.so.6 (0x120a72000) > libintl.so.9 =3D> /usr/local/lib/libintl.so.9 (0x120aaa000) > libthr.so.3 =3D> /lib/libthr.so.3 (0x120acc000) > libc.so.7 =3D> /lib/libc.so.7 (0x120b1a000) > libiconv.so.3 =3D> /usr/local/lib/libiconv.so.3 (0x120dca000) > TZAV> >=20 > TZAV> ldd /usr/local/bin/fetchmail > /usr/local/bin/fetchmail: > libopie.so.7 =3D> /usr/lib/libopie.so.7 (0x120100000) > libcrypt.so.5 =3D> /lib/libcrypt.so.5 (0x12011e000) > libkvm.so.5 =3D> /lib/libkvm.so.5 (0x120158000) > libcom_err.so.5 =3D> /usr/lib/libcom_err.so.5 (0x120178000) > libssl.so.6 =3D> /usr/lib/libssl.so.6 (0x12018a000) > ^^^^^^^^^^^^^^^ > libcrypto.so.6 =3D> /lib/libcrypto.so.6 (0x12022c000) > ^^^^^^^^^^^^^^^ > libc.so.7 =3D> /lib/libc.so.7 (0x1204dc000) > libmd.so.6 =3D> /lib/libmd.so.6 (0x12078c000) > TZAV> >=20 > Or will the new library (what is it?) will not > be used unless I delete the old ones? >=20 > Thanks >=20 > -- > Anton Shterenlikht > Room 2.6, Queen's Building > Mech Eng Dept > Bristol University > University Walk, Bristol BS8 1TR, UK > Tel: +44 (0)117 331 5944 > Fax: +44 (0)117 929 4423 > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current- > unsubscribe@freebsd.org"