Re: OpenSSL security announcement?

2006-09-14 Thread Torsten Homeyer
On Wed, Sep 13, 2006, Adam D. Morley wrote: The problem is two-fold: first, cURL has to be proxy-aware to fetch the RDF indices and second, RPM has to be proxy-aware for fetching the RPM packages. The problem is that making cURL proxy-aware is simply a matter of setting the ftp_proxy

Re: OpenSSL security announcement?

2006-09-14 Thread Adam D. Morley
On Thu, Sep 14, 2006 at 07:54:24AM +0200, Ralf S. Engelschall wrote: On Wed, Sep 13, 2006, Adam D. Morley wrote: [snip] Could it be done, or would this be something that the community would have to pay for? It certainly _is_ doable. Either by doing the RPM 4.4 upgrade (which we need

Re: OpenSSL security announcement?

2006-09-14 Thread Jeff Johnson
On Sep 14, 2006, at 4:06 PM, Adam D. Morley wrote: It certainly _is_ doable. Either by doing the RPM 4.4 upgrade (which we need sometime in the future anyway and which I would recommend to do) or by hacking in support for FTP-via-HTTP proxying into RPM 4.2 (which I do not really

Re: OpenSSL security announcement?

2006-09-14 Thread Ralf S. Engelschall
On Thu, Sep 14, 2006, Jeff Johnson wrote: On Sep 14, 2006, at 4:06 PM, Adam D. Morley wrote: It certainly _is_ doable. Either by doing the RPM 4.4 upgrade (which we need sometime in the future anyway and which I would recommend to do) or by hacking in support for FTP-via-HTTP proxying into

Re: OpenSSL security announcement?

2006-09-14 Thread Jeff Johnson
On Sep 14, 2006, at 4:25 PM, Ralf S. Engelschall wrote: On Thu, Sep 14, 2006, Jeff Johnson wrote: On Sep 14, 2006, at 4:06 PM, Adam D. Morley wrote: It certainly _is_ doable. Either by doing the RPM 4.4 upgrade (which we need sometime in the future anyway and which I would recommend to do)

Re: OpenSSL security announcement?

2006-09-14 Thread Ralf S. Engelschall
On Thu, Sep 14, 2006, Jeff Johnson wrote: On Sep 14, 2006, at 4:25 PM, Ralf S. Engelschall wrote: On Thu, Sep 14, 2006, Jeff Johnson wrote: On Sep 14, 2006, at 4:06 PM, Adam D. Morley wrote: It certainly _is_ doable. Either by doing the RPM 4.4 upgrade (which we need sometime in the

Re: OpenSSL security announcement?

2006-09-13 Thread Adam D. Morley
On Wed, Sep 06, 2006 at 06:03:18PM -0700, Bill Campbell wrote: On Wed, Sep 06, 2006, Adam D. Morley wrote: Hi, The recent OpenSSL security announcement: http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.018-openssl.html hints that I need to build a new OpenSSL pacakge

Re: OpenSSL security announcement?

2006-09-13 Thread Ralf S. Engelschall
On Wed, Sep 13, 2006, Adam D. Morley wrote: On Wed, Sep 06, 2006 at 06:03:18PM -0700, Bill Campbell wrote: On Wed, Sep 06, 2006, Adam D. Morley wrote: Hi, The recent OpenSSL security announcement: http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.018-openssl.html hints

Re: OpenSSL security announcement?

2006-09-06 Thread Bill Campbell
On Wed, Sep 06, 2006, Adam D. Morley wrote: Hi, The recent OpenSSL security announcement: http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.018-openssl.html hints that I need to build a new OpenSSL pacakge for OpenPKG. However, after looking at programs that depend on OpenSSL