openssl version - how to verify

c0re nr1c0re at gmail.com
Tue Nov 16 07:28:23 UTC 2010


Jerry, I'm not about that :) base openssl are OK. But I need proves
that it has got no security problems - it's external IT auditors
request.
And I'm interested how I can know what patchlevel there on base
openssl version and prove them (auditors) that freebsd base openssl
are not vulnerable.

2010/11/15 Jerry <freebsd.user at seibercom.net>:
> On Mon, 15 Nov 2010 18:40:27 +0300
> c0re <nr1c0re at gmail.com> articulated:
>
>> There are still too many broken ports with openssl from ports, I do
>> not like debug it and really like to use base openssl, almost no
>> difference.
>
> Might I suggest that if you are aware of ports that don't work
> correctly with the port's version of openssl that you file a PR against
> it. I have done so and succeeded in getting several patches issued to
> correct the problem. This problem will not go away by itself.
>
> --
> Jerry ✌
> FreeBSD.user at seibercom.net
>
> Disclaimer: off-list followups get on-list replies or get ignored.
> Please do not ignore the Reply-To header.
> __________________________________________________________________
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>


More information about the freebsd-questions mailing list