FreeBSD-SA-09:15.ssl [was: Kdokoliv (lokalni) rootem]

[Miroslav Lachman]

Marian Cerny wrote:
> On 3.12.2009 13:32, Miroslav Lachman wrote:
>> 2009-12-03
>> FreeBSD-SA-09:15.ssl
>> http://security.freebsd.org/advisories/FreeBSD-SA-09:15.ssl.asc
>
> Ohladne toho problemu s renegotiation v SSL, prejavi sa oprava
> (zakazanie renegotiation) v openssl aj v apachi? Pouziva apache
> systemovu openssl kniznicu

To se da jednoduse zjistit:

# ldd /usr/local/libexec/apache22/mod_ssl.so
/usr/local/libexec/apache22/mod_ssl.so:
         libssl.so.5 => /usr/lib/libssl.so.5 (0x800b2f000)
         libcrypto.so.5 => /lib/libcrypto.so.5 (0x800c79000)
         libcrypt.so.4 => /lib/libcrypt.so.4 (0x800f0b000)
         libthr.so.3 => /lib/libthr.so.3 (0x801024000)
         libc.so.7 => /lib/libc.so.7 (0x800633000)

Takze ano, pouziva systemove openssl (pokud mu neni vnucena jina pri 
kompilaci, nebo libmap.conf)

Mirek