Re: Need to upgrade openssl on my Solaris10 server

2008-09-05 Thread Ricardo Stella
[EMAIL PROTECTED] wrote:
>
> Hello,
>
> We have security holes that need to be fixed on our Solaris 10
> server.  I have applied the Solaris 10  "Recommended and Security"
> patch bundle that was updated on 09/02/08.   One of the security holes
> is will openssl.   How do I upgrade it?   Currently we are running:_
> OpenSSL 0.9.7d 17 Mar 2004 (+ security patches to 2006-09-29_).  I
> would like to go to the lastest which I believe is:_ OpenSSL
> 0.9.8h_.How do I get the PKG for the latest version.   I  found a
> tar file located at _http://www.openssl.org/source/_ , but don't know
> how I can apply it to my system.
>
> Thanks,
> Randy Grode
> Cargill, Inc
>

OS default installations will get security patches applied.  Relevant
poatches are 127127 for SPARAC and 127128 for x86.  For verison 0.9.8,
you can:

a) get the package from sunfreeware or
b) compile from source (this is what options I used - YMMV):

./config -fPIC shared no-idea threads

make depend
make
make test
make install


-- 

°(((=((===°°°(((===

__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: Need to upgrade openssl on my Solaris10 server

2008-09-05 Thread Kyle Hamilton
The security fixes should have been installed as part of patch number
137111-06, which is part of that bundle.  0.9.8 is not
binary-compatible with 0.9.7, and any apps linked to 0.9.7 will fail
to run if you remove the 0.9.7 shared objects.

I am not a Solaris guy, but I would suggest looking at
http://www.sunfreeware.com/ to obtain precompiled packages.  The tar
you got at openssl.org/source is source code that must be compiled in
order to run.

-Kyle H

On Thu, Sep 4, 2008 at 12:07 PM,  <[EMAIL PROTECTED]> wrote:
> Hello,
>
> We have security holes that need to be fixed on our Solaris 10 server.  I
> have applied the Solaris 10  "Recommended and Security" patch bundle that
> was updated on 09/02/08.   One of the security holes is will openssl.   How
> do I upgrade it?   Currently we are running: OpenSSL 0.9.7d 17 Mar 2004 (+
> security patches to 2006-09-29).  I would like to go to the lastest which I
> believe is: OpenSSL 0.9.8h.How do I get the PKG for the latest
> version.   I  found a tar file located at http://www.openssl.org/source/ ,
> but don't know how I can apply it to my system.
>
> Thanks,
> Randy Grode
> Cargill, Inc
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]