openssl version - how to verify

[Indexer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 16/11/2010, at 00:38, Jerry wrote:

> On Mon, 15 Nov 2010 16:17:10 +0300
> c0re <nr1c0re at gmail.com> articulated:
> 
>> If I look at base openssl in 7.3-RELEASE-p3
>> 
>> sys# openssl version -a
>> OpenSSL 0.9.8e 23 Feb 2007
>> built on: Mon Sep 27 11:54:36 MSD 2010
>> platform: FreeBSD-i386
>> options:  bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
>> blowfish(idx) compiler: cc
>> OPENSSLDIR: "/etc/ssl"
>> 
>> but at www.openssl.org I see that it's not recent version
>> 
>> 01-Jun-2010:	   OpenSSL 0.9.8o is now available, including
>> important bug and security fixes
>> 
>> I know that freebsd security team make patches for base openssl, but
>> how can I know what patchlevel of openssl in base version?
>> 
>> Like "-p5" in "OpenSSL 0.9.8e-p5 23 Feb 2007".
> 
> Why not just install the ports version:

It breaks alot, and causes you to need to rebuild some parts of the base system. The most notable, is SSHD, which whenever I install the openssl from ports, will not work unless i rebuild SSHD or, remove the ports version.

> 
> openssl version -a 
> OpenSSL 1.0.0a 1 Jun 2010
> built on: Sun Jun  6 12:19:12 EDT 2010
> platform: BSD-x86_64
> options:  bn(64,64) rc4(8x,int) des(idx,cisc,16,int) idea(int) blowfish(idx) 
> compiler: cc -fPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIOS -O3 -DMD32_REG_T=int -Wall -O2 -pipe -march=athlon64 -fno-strict-aliasing -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DWHIRLPOOL_ASM
> OPENSSLDIR: "/usr/local/openssl"
> 
> You would need to add this to the "/etc/make.conf" file first I believe:
> 
> 	WITH_OPENSSL_PORT=yes
> 
> -- 
> Jerry ✌
> FreeBSD.user at seibercom.net
> 
> Disclaimer: off-list followups get on-list replies or get ignored.
> Please do not ignore the Reply-To header.
> __________________________________________________________________
> Fat Liberation: because a waist is a terrible thing to mind.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"

William Brown

pgp.mit.edu



-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.14 (Darwin)

iQIcBAEBAgAGBQJM4T+aAAoJEHF16AnLoz6JNjsP/iK5wpZqSnQzkPpnjusBDUTG
emCG8MJw7191ovvLjREbwzQjdjRFm8iGnkXcFgQabatI24Ks5WP8bR88PzYShDG7
h2kFBcmfqftnEfeWmvdjTxpE6hSxzN6291Zew4O36RMraEY/RHAUZjblB5Bu1IgS
XSrOJ1ETQNXS54eMTctf6erpX1ASgGq2kGRcXGCBbqTN8smUoGtz06GiNsYzS9Qk
7iytF8kpUMpqmKoV/Os07ETcmoRTwbAgv6J7IL0nS7kTN+8BYgUY5vxL/+pRHN+Y
YiXWKHgK4VCz3fW5NXQddDR1I/6clDK0ZfSDnZdHOHjkMrjTMdlzIz2OTMtkF9Z+
saQm1m78/or1FXBNXfzUhvKd3UnAoJC0PpndZTzrwiB7huJiAvvD0AJdvNyzPtM2
V7DuDY9zrBRmB5DDr1HQEEqgTRI1ZzdXo5uPwUM+RctOsxYDFvF8MFqs/eC3z9Vz
PFxHX/uIbEAC6IdrkwhyVOQR1vup8U/bwgLiXDK9y82oQdksNBYbU1EWh2nanaPH
CJj9WJNn2suNrYouTRhTDnCVxl0hbAgYT7w5CEfRAx8s3g82sZ+/evJutr2U7tHW
/LzwoY9qyWn19t6dqMw+kENsGDKPzXkFIQ9txi5XIH8bgUKeOhJQE610uMSPvmB8
zDwJ4bEaIUzjhasCKjNS
=c5mr
-----END PGP SIGNATURE-----