Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Nov 2010 00:41:32 +1030
From:      Indexer <indexer@internode.on.net>
To:        FreeBSD <freebsd-questions@freebsd.org>
Subject:   Re: openssl version - how to verify
Message-ID:  <81515984-72F4-4CD1-AD9F-2CE7EDF944B2@internode.on.net>
In-Reply-To: <20101115090851.237f167b@scorpio>
References:  <AANLkTinFoAC=t6-cp7ofphi=X%2BbGwkY-CL3X6B_ChTXH@mail.gmail.com> <20101115090851.237f167b@scorpio>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 16/11/2010, at 00:38, Jerry wrote:

> On Mon, 15 Nov 2010 16:17:10 +0300
> c0re <nr1c0re@gmail.com> articulated:
>=20
>> If I look at base openssl in 7.3-RELEASE-p3
>>=20
>> sys# openssl version -a
>> OpenSSL 0.9.8e 23 Feb 2007
>> built on: Mon Sep 27 11:54:36 MSD 2010
>> platform: FreeBSD-i386
>> options:  bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
>> blowfish(idx) compiler: cc
>> OPENSSLDIR: "/etc/ssl"
>>=20
>> but at www.openssl.org I see that it's not recent version
>>=20
>> 01-Jun-2010:	   OpenSSL 0.9.8o is now available, including
>> important bug and security fixes
>>=20
>> I know that freebsd security team make patches for base openssl, but
>> how can I know what patchlevel of openssl in base version?
>>=20
>> Like "-p5" in "OpenSSL 0.9.8e-p5 23 Feb 2007".
>=20
> Why not just install the ports version:

It breaks alot, and causes you to need to rebuild some parts of the base =
system. The most notable, is SSHD, which whenever I install the openssl =
from ports, will not work unless i rebuild SSHD or, remove the ports =
version.

>=20
> openssl version -a=20
> OpenSSL 1.0.0a 1 Jun 2010
> built on: Sun Jun  6 12:19:12 EDT 2010
> platform: BSD-x86_64
> options:  bn(64,64) rc4(8x,int) des(idx,cisc,16,int) idea(int) =
blowfish(idx)=20
> compiler: cc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB =
-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN =
-DTERMIOS -O3 -DMD32_REG_T=3Dint -Wall -O2 -pipe -march=3Dathlon64 =
-fno-strict-aliasing -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT =
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DWHIRLPOOL_ASM
> OPENSSLDIR: "/usr/local/openssl"
>=20
> You would need to add this to the "/etc/make.conf" file first I =
believe:
>=20
> 	WITH_OPENSSL_PORT=3Dyes
>=20
> --=20
> Jerry =E2=9C=8C
> FreeBSD.user@seibercom.net
>=20
> Disclaimer: off-list followups get on-list replies or get ignored.
> Please do not ignore the Reply-To header.
> __________________________________________________________________
> Fat Liberation: because a waist is a terrible thing to mind.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to =
"freebsd-questions-unsubscribe@freebsd.org"

William Brown

pgp.mit.edu



-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.14 (Darwin)
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=3Dc5mr
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?81515984-72F4-4CD1-AD9F-2CE7EDF944B2>