From owner-freebsd-questions@FreeBSD.ORG Sat Mar 20 08:58:44 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 210B016A4CE for ; Sat, 20 Mar 2004 08:58:44 -0800 (PST) Received: from sccrmhc12.comcast.net (sccrmhc12.comcast.net [204.127.202.56]) by mx1.FreeBSD.org (Postfix) with ESMTP id D21FB43D1D for ; Sat, 20 Mar 2004 08:58:43 -0800 (PST) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from be-well.no-ip.com ([66.30.196.44]) by comcast.net (sccrmhc12) with ESMTP id <2004032016584301200aardne>; Sat, 20 Mar 2004 16:58:43 +0000 Received: by be-well.no-ip.com (Postfix, from userid 1147) id DBB1812; Sat, 20 Mar 2004 11:58:42 -0500 (EST) Sender: lowell@be-well.ilk.org To: freebsd-questions@freebsd.org References: <6.1.0.3.2.20040319065841.00ab1e78@localhost> From: Lowell Gilbert Date: 20 Mar 2004 11:58:42 -0500 In-Reply-To: <6.1.0.3.2.20040319065841.00ab1e78@localhost> Message-ID: <44smg3mp4t.fsf@be-well.ilk.org> Lines: 27 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: Re: update of OpenSSL from tarball X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Mar 2004 16:58:44 -0000 "J.D. Bronson" writes: > I thought I would post to the group my solution for updating OpenSSL > w/o having to rebuild the entire machine... > > # tar xzf openssl-0.9.7d.tar.gz > # cd openssl-0.9.7d > # ./config --prefix=/usr --openssldir=/etc/ssl > # make > # make test > # make install > > ..this seems to correctly place all the files where they need to be > with the exception of a few. I did recompile a few apps since they had > ldd to older files that were incorrect. > > The problem is that I build most things from tarballs and overwrite > alot of the base install binaries....so if I did this fix the > 'correct' way, I would have quite a mess on my hands. > > YMMV Most peoples' mileage *does* vary, because updating OpenSSL by itself isn't enough. Everything that linked to it statically needs to be updated as well, which most people won't have the skill (or inclination) to track down.