Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Apr 2008 11:15:04 -0700 (PDT)
From:      Roger Marquis <marquis@roble.com>
To:        freebsd-security@freebsd.org
Subject:   openssldoesn't -overwrite-base again (was: FreeBSD-SA-08:05.openssh)
Message-ID:  <20080417181504.20C902B4039@mx5.roble.com>
In-Reply-To: <20080417120024.AFEF810656FB@hub.freebsd.org>
References:  <20080417120024.AFEF810656FB@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
I'd like to thank the openssh-portable port maintainer/s for
preserving the -overwrite-base option. This eases our systems and
security update jobs measurably.

Unfortunately, openSSL has dropped the -overwrite-base option
(again), leaving us with two versions of openssl and some
confusion over A) which version of openssl a new port or upgrade
(i.e., openssh) will use, and B) how to update systems with
openssl-overwrite-base installed.

Is there a best practice/recommendation for updating
openssl-overwrite-base without having to maintain multiple
versions?

Roger Marquis
Roble Systems Consulting



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080417181504.20C902B4039>