openssl from ports

[Maxim Khitrov]

On Fri, Mar 2, 2012 at 5:00 PM, Randal L. Schwartz
<merlyn at stonehenge.com> wrote:
>
> I know openssl is in the core, but the version in FreeBSD 8.2 is
> vulnerable to some recent attacks.  (Hmm, I wonder why there hasn't been
> an 8.2 update then...)

Which attacks are you referring to?

> I installed the version from ports, which was recently updated, but now
> I'm not sure how to get my other ports to use that port instead of the
> core libraries.  Is it sufficient to restart the apps (apache in
> particular), or do I need to recompile things?

You will need to recompile ports that depend on OpenSSL, passing
WITH_OPENSSL_PORT= flag to make. My preferred way to do this is to
install ports-mgmt/portconf and use something like this for
/usr/local/etc/ports.conf:

*: WITHOUT_IPV6 | WITHOUT_NLS | WITHOUT_X11 | WITHOUT_GTK | WITH_OPENSSL_PORT

- Max