OpenSSL import [was: cvs commit: src/sys/amd64/amd64 mp_machdep.c src/sys/i386/i386 mp_machdep.c]

[Simon L. Nielsen]

On 2007.11.09 11:34:01 -0800, Xin LI wrote:

> > [1] OpenSSL 0.9.7h, change 10/2005 by Matthew D. Wood of Intel,
> > http://www.openssl.org/news/changelog.html
> > [2] OpenSSL 0.9.8f, change 10/2007 by Matthew D. Wood of Intel,
> > http://www.openssl.org/news/changelog.html
> 
> Sorry for hijacking this thread, are we going to import a new OpenSSL
> release?  Sounds like we have to do a full package build if we want to
> do that...

For both RELENG_6 and RELENG_7, not unless somebody comes up with very
strong arguments to do so.  The risk of blowing things up this late in
the release cycle is just to great.

The latest 0.9.8 security issue was fixed with patch rather than
complete new import to avoid disruptions to the 7.x release process.

My current plan is to import the new OpenSSL 0.9.8 release into HEAD
after 7.0 has been released, and them MFC to RELENG_7 if possble
later.

-- 
Simon L. Nielsen
Hat: OpenSSL maintainer/janitor