Date: Thu, 4 Oct 2007 12:44:15 +0300 From: Vladimir Terziev <vlady@gbservices.biz> To: Dag-Erling =?ISO-8859-1?Q?Sm=F8rgrav?= <des@des.no> Cc: freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-07:08.openssl Message-ID: <20071004124415.83a70f71.vlady@gbservices.biz> In-Reply-To: <86ir5nqlag.fsf@ds4.des.no> References: <200710032158.l93LwUfM089929@freefall.freebsd.org> <20071004103608.e67dd613.vlady@gbservices.biz> <86ir5nqlag.fsf@ds4.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
Dag-Erling, i have to apologize for the question. The problem was implied by me, since i put in my /etc/make.conf, MAKE_IDEA= =3Dyes. It seems, the FreeBSD 6.2-RELEASE is not built with this option set= and the original SSL libraries do not have support for IDEA in them. I have commented the option and after the re-build of patched SSL librarie= s i have all services working fine as before. Best regards, Vladimir On Thu, 04 Oct 2007 11:30:31 +0200 Dag-Erling Sm=F8rgrav <des@des.no> wrote: > Vladimir Terziev <vlady@gbservices.biz> writes: > > I have applied the patch on a FreeBSD 6.2-RELEASE system and several > > of the services (courier-imap, postfix) on the machine stopped. > > > > I got the following error: > > > > /libexec/ld-elf.so.1: /usr/lib/libssl.so.4: Undefined symbol > > "EVP_idea_cbc" >=20 > You fat-fingered the update, either by building with a different set of > options than previously, or by checking out only a partial tree. The > simplest fix is to check out a full RELENG_6_2 tree and build and > install world. >=20 > > I compared SSL libraries on the patched system with the same, but on > > unpatched system. The difference, i found, is an extra library in > > /usr/lib, on the patched system -- ``/usr/lib/libssl_p.a''. >=20 > That's a profiling version of libssl; it isn't used on a production > system and has no part in this. >=20 > DES > --=20 > Dag-Erling Sm=F8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071004124415.83a70f71.vlady>