Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-10 Thread Janne Johansson
2014-05-09 8:44 GMT+02:00 Lucius Rizzo : > Many many years ago (2001) Darrent Moffat wrote about the problems of using > statically linked binaries or libraries. In fact, until later versions of > Solaris, most compiles would often statically link binaries or libraries. > > Its quite interesting f

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-09 Thread Ingo Schwarze
> What is the purpose static linking ftp(1) ? Imagine your system is really badly broken, for example ld.so or libc.so got deleted or broken. Then you can still use the statically linked tools in /bin and /sbin for repairs. But what if you need to fetch more tools or replacement parts over the

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-09 Thread Ingo Schwarze
Hi, martinblan...@gmail.com wrote on Sat, May 10, 2014 at 01:17:39AM +: > One more quick question. > Can somebody post the snippet of source code from the FTP program > which is statically linked with libssl? I don't actually know what > it looks like and would like to be able to identify it

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-09 Thread Артур Истомин
On Thu, May 08, 2014 at 11:53:19PM -0600, Theo de Raadt wrote: > > On Thu, May 8, 2014 at 9:03 PM, staticsafe wrote: > > > man ldd > > > http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1 > > > > ldd won't help with statically linked binaries. > > > > # gcc -o dynamic_test test.c > > # l

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-09 Thread martinblank64
Thank you all for the information. One more quick question. Can somebody post the snippet of source code from the FTP program which is statically linked with libssl? I don't actually know what it looks like and would like to be able to identify it in the future and search for them. Many than

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-09 Thread staticsafe
On 5/9/2014 01:51, J Sisson wrote: > On Thu, May 8, 2014 at 9:03 PM, staticsafe wrote: >> man ldd >> http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1 > > ldd won't help with statically linked binaries. > > # gcc -o dynamic_test test.c > # ldd dynamic_test > dynamic_test: > Star

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-09 Thread Kent Fritz
I found a few hidden statically linked instances of OpenSSL (on other platforms) using strings. e.g.: strings /usr/bin/ftp | grep OpenSSL

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-08 Thread Lucius Rizzo
* J Sisson [2014-05-08 22:51]: > On Thu, May 8, 2014 at 9:03 PM, staticsafe wrote: > > man ldd > > http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1 > > ldd won't help with statically linked binaries. > > # gcc -o dynamic_test test.c > # ldd dynamic_test > dynamic_test: > Start

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-08 Thread Theo de Raadt
> On Thu, May 8, 2014 at 9:03 PM, staticsafe wrote: > > man ldd > > http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1 > > ldd won't help with statically linked binaries. > > # gcc -o dynamic_test test.c > # ldd dynamic_test > dynamic_test: > StartEnd Type Open Ref GrpRe

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-08 Thread J Sisson
On Thu, May 8, 2014 at 9:03 PM, staticsafe wrote: > man ldd > http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1 ldd won't help with statically linked binaries. # gcc -o dynamic_test test.c # ldd dynamic_test dynamic_test: StartEnd Type Open Ref GrpRef Name 8

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-08 Thread Ted Unangst
On Thu, May 08, 2014 at 20:26, Andrew Lester wrote: > I am relatively new to BSD, and by extension, OpenBSD. I am using it on a > small Atom-based server to act as a router, firewall and DNS server. In the > future, I may use it for web hosting as well. I bought the three disc set to > acquire the

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-08 Thread staticsafe
On 5/8/2014 21:26, Andrew Lester wrote: > How would I determine whether or not any of these include binaries that are > statically linked with libssl? Any help is much appreciated! > > Best regards, > > Andrew > man ldd http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1 -- staticsafe h

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-08 Thread bodie
On 09.05.2014 03:26, Andrew Lester wrote: Hi All, I am relatively new to BSD, and by extension, OpenBSD. I am using it on a small Atom-based server to act as a router, firewall and DNS server. In the future, I may use it for web hosting as well. I bought the three disc set to acquire the so

Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-08 Thread Andrew Lester
Hi All, I am relatively new to BSD, and by extension, OpenBSD. I am using it on a small Atom-based server to act as a router, firewall and DNS server. In the future, I may use it for web hosting as well. I bought the three disc set to acquire the source code, and then I applied the patch to rem