[SOLVED] tips on updating openssl on unsupported release of slack

plisken · 04-23-2014, 11:35 AM

for one reason or another, I have a 9.1 install running still and while upgating my other boxes with the usual slackpkg upgrade [whatever package] routine, I thought, hey what about my 9.1

So sparing the reasons, would I simply be looking to uninstall the current openssl

Code:

removepkg openssl

[compile new one]

./config
make
make install

or do I need to add any additional options, install locations or so?

And finally, what about the openssl-solibs

Thanks in advance...

tronayne · 04-23-2014, 12:23 PM

You may not need to, depending upon the version you have installed: look at my original post at http://www.linuxquestions.org/questi...4/#post5148814.

9.1's most likely not vulnerable.

Hope this helps some.

fskmh · 04-23-2014, 12:30 PM

I think the best you can do with 0.9.8 is to make sure you've upgraded to 0.9.8y:
https://www.openssl.org/news/openssl-0.9.8-notes.html

Quote:

What versions of the OpenSSL are affected?

Status of different versions:

OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable
OpenSSL 1.0.1g is NOT vulnerable
OpenSSL 1.0.0 branch is NOT vulnerable
OpenSSL 0.9.8 branch is NOT vulnerable

Bug was introduced to OpenSSL in December 2011 and has been out in the wild since OpenSSL release 1.0.1 on 14th of March 2012. OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug.

ruario · 04-23-2014, 12:31 PM

If you do find you need to, you could grab the SlackBuild from a supported version (tweak it to use tgz instead of txz) and then use that to make a package.

fskmh · 04-23-2014, 12:54 PM

Can't edit my previous post for some reason...

The oldest installation I have is Slamd64 12.1 and the build script for 13.37 worked for me, so for 32 bit that would be this one:

ftp://ftp.slackware.com/pub/slackwar...ource/openssl/

Just grab the whole directory and remember to these two instances of containing txz with tgz:

Code:

/sbin/makepkg -l y -c n $TMP/${NAME1}.txz

Code:

/sbin/makepkg -l y -c n $TMP/${NAME2}.txz

ruario · 04-23-2014, 01:05 PM

Quote:

Originally Posted by ruario

If you do find you need to, you could grab the SlackBuild from a supported version (tweak it to use tgz instead of txz) and then use that to make a package.

Here is the full set of steps:

Code:

$ mkdir -p /tmp/staging
$ cd /tmp/staging
$ lftp -c 'open http://mirrors.slackware.com/slackware/slackware-13.37/patches/source/; mirror -x ".*\.mirrorlist" openssl'

Tweak openssl.SlackBuild to produce an .tgz package instead of a .txz package:

Code:

$ sed -i '/makepkg/s/txz$/tgz/' /tmp/staging/openssl/openssl.SlackBuild

Switch to root and run the SlackBuild:

Code:

$ su -
# cd /tmp/staging/openssl
# sh openssl.SlackBuild

Upgrade the openssl packages:

Code:

# upgradepkg /tmp/openssl-*0.9.8y-*.tgz

tronayne · 04-23-2014, 01:06 PM

You can go to http://ftp.osuosl.org/pub/slackware/...ches/packages/ (or some other favorite mirror) and download

Code:

[   ] openssl-0.9.7l-i486-1_slack9.1.tgz                 29-Sep-2006 04:03  2.8M  
[TXT] openssl-0.9.7l-i486-1_slack9.1.tgz.asc             29-Sep-2006 04:03  189   
[TXT] openssl-0.9.7l-i486-1_slack9.1.txt                 29-Sep-2006 04:03  561   
[   ] openssl-solibs-0.9.7l-i486-1_slack9.1.tgz          29-Sep-2006 04:03  677K  
[TXT] openssl-solibs-0.9.7l-i486-1_slack9.1.tgz.asc      29-Sep-2006 04:03  189   
[TXT] openssl-solibs-0.9.7l-i486-1_slack9.1.txt          29-Sep-2006 04:03  678

and use those to

Code:

upgradepkg openssl*.t?z

Those are the last Slackware patches for 9.1.

Alternately, you can grab the source from http://ftp.osuosl.org/pub/slackware/...ource/openssl/, get the 0.9.8y source from @fskmsh's post above, edit the SlackBuild in the source directory and build the packages from there (you'd edit the version number in the SlackBuild).

May or may not be worth bothering with, though (are you running an https web page on that box or are you using that box to connect to https web sites?).

Hope this helps some.

plisken · 04-26-2014, 02:50 AM

Thanks for all help/posts above, I am running 0.9.71 so guessing will just leave alone, really should get the box offline but still running a couple of sites on there from so long ago.

Thanks