Re: FreeBSD Security Advisory FreeBSD-SA-07:08.openssl



	Dag-Erling,

	i have to apologize for the question.

	The problem was implied by me, since i put in my /etc/make.conf, MAKE_IDEA=
=3Dyes. It seems, the FreeBSD 6.2-RELEASE is not built with this option set=
 and the original SSL libraries do not have support for IDEA in them.

	I have commented the option and after the re-build of patched SSL librarie=
s i have all services working fine as before.

	Best regards,

		Vladimir


On Thu, 04 Oct 2007 11:30:31 +0200
Dag-Erling Sm=F8rgrav <des@des.no> wrote:

> Vladimir Terziev <vlady@gbservices.biz> writes:
> > I have applied the patch on a FreeBSD 6.2-RELEASE system and several
> > of the services (courier-imap, postfix) on the machine stopped.
> >
> > I got the following error:
> >
> > /libexec/ld-elf.so.1: /usr/lib/libssl.so.4: Undefined symbol
> > "EVP_idea_cbc"
>=20
> You fat-fingered the update, either by building with a different set of
> options than previously, or by checking out only a partial tree.  The
> simplest fix is to check out a full RELENG_6_2 tree and build and
> install world.
>=20
> > I compared SSL libraries on the patched system with the same, but on
> > unpatched system. The difference, i found, is an extra library in
> > /usr/lib, on the patched system -- ``/usr/lib/libssl_p.a''.
>=20
> That's a profiling version of libssl; it isn't used on a production
> system and has no part in this.
>=20
> DES
> --=20
> Dag-Erling Sm=F8rgrav - des@des.no
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"