openssldoesn't -overwrite-base again (was: FreeBSD-SA-08:05.openssh)

I'd like to thank the openssh-portable port maintainer/s
for
preserving the -overwrite-base option. This eases our
systems and
security update jobs measurably.

Unfortunately, openSSL has dropped the -overwrite-base
option
(again), leaving us with two versions of openssl and some
confusion over A) which version of openssl a new port or
upgrade
(i.e., openssh) will use, and B) how to update systems with
openssl-overwrite-base installed.

Is there a best practice/recommendation for updating
openssl-overwrite-base without having to maintain multiple
versions?

Roger Marquis
Roble Systems Consulting
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-secu
rity
To unsubscribe, send any mail to
"freebsd-security-unsubscribefreebsd.org"

Roger Marquis schrieb:,

> Unfortunately, openSSL has dropped the -overwrite-base
option
> (again), leaving us with two versions of openssl and
some
> confusion over A) which version of openssl a new port
or upgrade
> (i.e., openssh) will use, and B) how to update systems
with
> openssl-overwrite-base installed.

The -overwrite-base option was only functional on FreeBSD
4.x
With FreeBSD 5.x the libs are spread in /lib and /usr/lib,
so even if the ports overwrite base libs, some tools still
use the old (unpatched) libs from /lib.

kind regards Dirk

- Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany
http://p
eople.freebsd.org/~dinoex/errorlogs/
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-secu
rity
To unsubscribe, send any mail to
"freebsd-security-unsubscribefreebsd.org"