LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-14-2002, 05:02 PM   #1
luba
LQ Newbie
 
Registered: Aug 2002
Location: Guatemala, Central America
Distribution: Red Hat
Posts: 1

Rep: Reputation: 0
Question Upgrading Openssl and mod_ssl


I'm using Red Hat 7.3 and the packages of openssl and mod_ssl are not up to date to the latest version (which patches serious security problems),

How can I upgrade the package what comes with Red Hat with the ones
that come directly from the official sites (www.openssl.org , www.modssl.org)?

I know I can delete the original packages and install from the tar balls... but
how can I be sure that all the packages that use openssl will work?

Thanks in advance.
 
Old 08-15-2002, 03:46 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Get the source from opensll, inside the tarball is a spec file, build the rpm and do an install/forced upgrade test. in nothing breaks* then try to install with the --repackage flag (IIRC), then rpm will automagically rebuild the old installed package back to rpm. at least then you have a roll back right there.

* from the openssl-0.9.6g/FAQ:

What is special about OpenSSL on Redhat?

Red Hat Linux (release 7.0 and later) include a preinstalled limited
version of OpenSSL. For patent reasons, support for IDEA, RC5 and MDC2
is disabled in this version. The same may apply to other Linux distributions.
Users may therefore wish to install more or all of the features left out.

To do this you MUST ensure that you do not overwrite the openssl that is in
/usr/bin on your Red Hat machine. Several packages depend on this file,
including sendmail and ssh. /usr/local/bin is a good alternative choice. The
libraries that come with Red Hat 7.0 onwards have different names and so are
not affected. (eg For Red Hat 7.2 they are /lib/libssl.so.0.9.6b and
/lib/libcrypto.so.0.9.6b with symlinks /lib/libssl.so.2 and
/lib/libcrypto.so.2 respectively).

Please note that we have been advised by Red Hat attempting to recompile the
openssl rpm with all the cryptography enabled will not work. All other
packages depend on the original Red Hat supplied openssl package. It is also
worth noting that due to the way Red Hat supplies its packages, updates to
openssl on each distribution never change the package version, only the
build number. For example, on Red Hat 7.1, the latest openssl package has
version number 0.9.6 and build number 9 even though it contains all the
relevant updates in packages up to and including 0.9.6b.

A possible way around this is to persuade Red Hat to produce a non-US
version of Red Hat Linux.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Apache + SSL + Upgrading OpenSSL shared lib TruckStuff Linux - Security 2 07-06-2005 05:41 PM
apache + mod_ssl without openssl , will it run ? kernelvn Linux - Security 1 10-01-2004 11:47 PM
Upgrading Openssl CarlosSunden Linux - General 1 05-21-2004 05:39 PM
upgrading to openssl 0.9.7d-1 on redhat 7.3 megaspaz Linux - Security 1 04-18-2004 06:52 AM
upgrading openssl from .tgz herc Slackware 1 03-19-2004 01:32 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration