Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 2 Nov 2015 07:15:22 +0100
From:      "O. Hartmann" <ohartman@zedat.fu-berlin.de>
To:        Eric van Gyzen <eric@vangyzen.net>
Cc:        Jung-uk Kim <jkim@FreeBSD.org>, FreeBSD-current <freebsd-current@FreeBSD.org>
Subject:   Re: [HEADSUP] OpenSSL updated to 1.0.2d
Message-ID:  <20151102071522.2090b374@freyja.zeit4.iv.bundesimmobilien.de>
In-Reply-To: <5634CECA.6080405@vangyzen.net>
References:  <5633D9C9.2060906@FreeBSD.org> <20151031112545.46aa9dca.ohartman@zedat.fu-berlin.de> <5634CECA.6080405@vangyzen.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 31 Oct 2015 09:23:06 -0500
Eric van Gyzen <eric@vangyzen.net> wrote:

> On 10/31/15 5:25 AM, O. Hartmann wrote:
> > Am Fri, 30 Oct 2015 16:57:45 -0400
> > Jung-uk Kim <jkim@FreeBSD.org> schrieb:
> >  
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> Hash: SHA256
> >>
> >> OpenSSL on head has been updated to 1.0.2d.  Please make sure to
> >> recompile all binaries depending on libcrypto.so.7 or libssl.so.7.  
> >
> > That is good news.
> >
> > Could you provide, please, some hints how one could check all installed
> > ports for the usage of those specific libraries? Or could you provide a
> > hint towards an existing port already providing those tools? It would be
> > great for those "from the set of ordinary people" using FreeBSD.
> >
> > I ask for that because I recall that there were a couple of ports which
> > explicitely asks for a selection of what SSL lib should be used and in my
> > case, I use the base system's one.  
> 
> I expect there's a port, but I'm not aware of one.
> 
> This should work:
> 
> find /usr/local/*bin /usr/local/lib* -type f | \
> while read F; do \
> 	objdump -x $F 2>&1 | grep -Eq 'NEEDED  *lib(crypto|ssl).so.7' && \
> 		echo $F; \
> done
> 
> This is in /bin/sh (or bash).  You could change "echo" to "pkg which"
> to show the package names.
> 
> Cheers,
> 
> Eric

Thank you very much.

For a "simple headless server" the update is much more convenient than for
systems with a graphical user's interface like X11, so having such a script at
hand via "UPDATING" other than a simple Email would be great.

Kind regards and thank you,

oh



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20151102071522.2090b374>