-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rainer,

On 4/25/16 8:57 AM, Rainer Jung wrote:
> Am 25.04.2016 um 14:31 schrieb Stefan Frei:
>> very sorry just solved it.
>> 
>> 
>> overlooked a line in configure
>> 
>> /root/tomcat-native-1.1.34-src/jni/native/build/get-version.sh: 
>> Permission denied
> 
> OK, no problem. If extracted from a source tarball, the file should
> have been executable by default though. It might be it is not if
> you picked a zip file source download.
> 
> Another comment: OpenSSL 1.0.1k is pretty old.

Debian has "stable" versions plus patches. So for example, my Debian
system currently reports OpenSSL 1.0.1e which is (by version number)
before Heartbleed was fixed. But if I ask Debian what the version of
the package is, it tells me:

1.0.1e-2+deb7u20

So there have been something like 20 patches against their stable
version, but they still maintain the version that was initially
released. So, even though "openssl version" reports:

$ openssl version
OpenSSL 1.0.1e 11 Feb 2013

It actually contains all of the "important" patches that have been
released since then (for whatever definition the Debian security team
has for "important").

> 1.0.1s is current for 1.0.1 and even better would be 1.0.2g but it
> might be, that you won't find such a packet for your OS version.

The nice thing about Debian is that it's super stable, in every sense
of the word. The bad thing about Debian is that it's super stable, in
every sense of the word.

> You could compile 1.0.2g yourself though and install in a separate
> directory. Using 1.0.2 you could switch to tcnative 1.2.x (which
> needs OpenSSL 1.0.2).

This is entirely possible, and it's how I perform my own testing for
tcnative releases (since they currently require 1.0.2).

Hope that helps,
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlcfkUcACgkQ9CaO5/Lv0PC/8ACgi9siQitWZ5I2bU4ReOBH7K2N
mywAnj5oj9Pxu69j++1CRCn9oMd8Qyfw
=N/WQ
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to