Openssl TLS Reneg "Bug"

Eygene Ryabinkin rea-fbsd at codelabs.ru
Thu Nov 19 15:19:25 UTC 2009


Tue, Nov 17, 2009 at 12:47:14PM +0100, Daniel wrote:
> new here so sorry if I am missing any important points. I was
> wondering#:   Does anyone know of the status of the "amended" openssl
> packages for FreeBSD. I'd like to try running our site with "reneg
> off", but I can't seem to find any notion of this on freebsd sites ?
> Any ideas, pointers ?

OpenSSL port was updated to 0.9.8l:
  http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/openssl/Makefile?rev=1.158;content-type=text%2Fx-cvsweb-markup

OpenSSL in the base system wasn't patched, according to the
svn.frebsd.org.
-- 
Eygene
 _                ___       _.--.   #
 \`.|\..----...-'`   `-._.-'_.-'`   #  Remember that it is hard
 /  ' `         ,       __.--'      #  to read the on-line manual
 )/' _/     \   `-_,   /            #  while single-stepping the kernel.
 `-'" `"\_  ,_.-;_.-\_ ',  fsc/as   #
     _.-'_./   {_.'   ; /           #    -- FreeBSD Developers handbook
    {_.-``-'         {_/            #


More information about the freebsd-security mailing list