Re: Openssl patch breaks Tor

2010-01-03 Thread J.C. Roberts
On Sat, 2 Jan 2010 18:45:00 -0500 nixlists nixmli...@gmail.com wrote: If I upgrade to -current, don't I risk stability and security issues; or are the chances of that are very low as far as this OS goes? (sigh) If you run *any* software, you are running the risk of stability and security

Re: Openssl patch breaks Tor

2010-01-03 Thread Stuart Henderson
On 2010-01-02, nixlists nixmli...@gmail.com wrote: If I upgrade to -current, don't I risk stability and security issues; stable mostly refers to API changes; neither -current nor -stable should be particularly unreliable (and security should be the same or better in -current).

Re: Openssl patch breaks Tor

2010-01-03 Thread Josh Rickmar
On Sun, Jan 03, 2010 at 12:31:55AM -0800, J.C. Roberts wrote: Long time ago I did try development versions of NetBSD and FreeBSD because I needed support for hardware that -stable didn't have, and they were quite shaky. Or do you guys just want more people to use -current for the project

Re: Openssl patch breaks Tor

2010-01-03 Thread J.C. Roberts
On Sun, 3 Jan 2010 08:15:55 + Josh Rickmar joshua_rick...@eumx.net wrote: On Sun, Jan 03, 2010 at 12:31:55AM -0800, J.C. Roberts wrote: Long time ago I did try development versions of NetBSD and FreeBSD because I needed support for hardware that -stable didn't have, and they were

Re: Openssl patch breaks Tor

2010-01-02 Thread Stuart Henderson
On 2009-12-31, J.C. Roberts list-...@designtools.org wrote: The right answer is backup your data, and do a fresh install of the most recent -CURRENT snapshot. Just a standard upgrade to a -current snapshot would also be fine. On 2009-12-30, Tasmanian Devil tasm.de...@googlemail.com wrote:

Re: Openssl patch breaks Tor

2010-01-02 Thread nixlists
If I upgrade to -current, don't I risk stability and security issues; or are the chances of that are very low as far as this OS goes? Long time ago I did try development versions of NetBSD and FreeBSD because I needed support for hardware that -stable didn't have, and they were quite shaky. Or do

Re: Openssl patch breaks Tor

2010-01-02 Thread Tomas Bodzar
I can compare OpenBSD to dev versions of OpenSolaris, DragonflyBSD, NetBSD or some stable Linux distro and I must say that OpenBSD is more stable and useful in its current version then any other OS in its stable version. Read this http://www.openbsd.org/faq/faq5.html#Flavors and especially this

Re: Openssl patch breaks Tor

2009-12-31 Thread nixlists
On 12/31/09, J.C. Roberts list-...@designtools.org wrote: On Wed, 30 Dec 2009 17:56:03 -0500 nixlists nixmli...@gmail.com wrote: On 12/30/09, Tasmanian Devil tasm.de...@googlemail.com wrote: Changes in version 0.2.1.21 - 2009-12-21 Downloaded, installed - same exact problem. Tried -alpha

Re: Openssl patch breaks Tor

2009-12-30 Thread Tasmanian Devil
Changes in version 0.2.1.21 - 2009-12-21 Downloaded, installed - same exact problem. Tried -alpha as well. Same problem. I assumed alpha worked... You're right! It seems I did give you bad advice. I'm sorry about that! I tried on a patched 4.6 machine, and my tor-0.2.2.6-alpha port which

Re: Openssl patch breaks Tor

2009-12-30 Thread nixlists
On 12/30/09, Tasmanian Devil tasm.de...@googlemail.com wrote: Changes in version 0.2.1.21 - 2009-12-21 Downloaded, installed - same exact problem. Tried -alpha as well. Same problem. I assumed alpha worked... You're right! It seems I did give you bad advice. I'm sorry about that! I tried

Re: Openssl patch breaks Tor

2009-12-30 Thread J.C. Roberts
On Wed, 30 Dec 2009 17:56:03 -0500 nixlists nixmli...@gmail.com wrote: On 12/30/09, Tasmanian Devil tasm.de...@googlemail.com wrote: Changes in version 0.2.1.21 - 2009-12-21 Downloaded, installed - same exact problem. Tried -alpha as well. Same problem. I assumed alpha worked...

Openssl patch breaks Tor

2009-12-29 Thread nixlists
Hi. The OpenBSD 4.6 errata OpenSSL TLS renegotiation patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.6/common/004_openssl.patch breaks stable release of Tor as described here (exactly the same issue on FreeBSD): http://archives.seul.org/tor/relays/Dec-2009/msg00014.html Tor is not vulnerable

Re: Openssl patch breaks Tor

2009-12-29 Thread J.C. Roberts
On Tue, 29 Dec 2009 21:16:22 + nixlists nixmli...@gmail.com wrote: Hi. The OpenBSD 4.6 errata OpenSSL TLS renegotiation patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.6/common/004_openssl.patch breaks stable release of Tor as described here (exactly the same issue on FreeBSD):

Re: Openssl patch breaks Tor

2009-12-29 Thread Tasmanian Devil
Tor is not vulnerable to the attack when used with the broken OpenSSL, but the patch stops it from working correctly as described in the above thread. The issue is fixed only in the alpha version of Tor, and AFAIK won't be fixed in stable:

Re: Openssl patch breaks Tor

2009-12-29 Thread nixlists
On 12/29/09, Tasmanian Devil tasm.de...@googlemail.com wrote: It is fixed in Tor's stable release already: http://archives.seul.org/tor/announce/Dec-2009/msg0.html Changes in version 0.2.1.21 - 2009-12-21 Downloaded, installed - same exact problem. Tried -alpha as well. Same problem. I