Re: Rebuild Haproxy with new openssl version
Lukas, Thanks for the update. How to verify whether haproxy already linked to openssl. Please note that I'm not build the haproxy from source code. Is there anyway to verify which version openssl used by haproxy? On Wed, Jan 21, 2015 at 1:46 PM, Lukas Tribus luky...@hotmail.com wrote: I have installed haproxy from ubuntu repo (haproxy version : 1.5.9). Recently Openssl security team released security patches for vulnerability (USN-2459-1). Please let me know how to rebuild the haproxy with newly installed Openssl version. Don't rebuild. Just use your operating systems package manager to update openssl and then restart haproxy. If you use Ubuntu (since you quote a ubuntu security notice), you just need to apt-get update apt-get upgrade and then restart haproxy. Only if haproxy is statically linked to openssl, a rebuild would be required, but then you would already know howto do it because you would have done it already in the first place. Regards, Lukas
RE: Rebuild Haproxy with new openssl version
Lukas, Thanks for the update. How to verify whether haproxy already linked to openssl. Can you use SSL or does it fail saying that you need to enable OpenSSL? If the former is the case, then SSL is enabled, otherwise, its not. Please note that I'm not build the haproxy from source code. Is there anyway to verify which version openssl used by haproxy? Please learn howto use your operating system. This is basic packet manager stuff. Read your OS and package manager documentation. Regards, Lukas
RE: Rebuild Haproxy with new openssl version
I have installed haproxy from ubuntu repo (haproxy version : 1.5.9). Recently Openssl security team released security patches for vulnerability (USN-2459-1). Please let me know how to rebuild the haproxy with newly installed Openssl version. Don't rebuild. Just use your operating systems package manager to update openssl and then restart haproxy. If you use Ubuntu (since you quote a ubuntu security notice), you just need to apt-get update apt-get upgrade and then restart haproxy. Only if haproxy is statically linked to openssl, a rebuild would be required, but then you would already know howto do it because you would have done it already in the first place. Regards, Lukas
