Forums.FreeBSD.org - SSL Issue?

Roger Marquis marquis at roble.com
Sun May 17 21:08:44 UTC 2015


Mark Felder wrote:
>> Considering the time to write and test patches is the same in either case
>> it is still an open question.

> Again, this is not possible. You can't just "replace" the base OpenSSL.
> That port or package would also have to replace every binary and library
> in the base system linked to an OpenSSL library such as libcrypt with a
> version that was built against the updated OpenSSL.

Sure, when you must change the ABI you also have to rebuild linked libs
and bins, but how many openssl 0.9 updates have required ABI changes?

Roger


More information about the freebsd-security mailing list