On Mon, Mar 02, 2009, Victor Duchovni wrote:
> On Mon, Mar 02, 2009 at 05:36:15PM -0800, Claus Assmann wrote:

> > Out of the box OpenSSL 0.9.8j fails to install on SunOS 5.10 ( cp:

> > What's the "correct" way to fix this? For now I "hacked" the Makefile
> > to ignore the result of the cp command.

> For me the "correct" solution was to not even consider using 0.9.8j at
> this time. It is IMNSHO not a "patch" release, rather a major feature
> release, with a lot of new code that has been sufficiently stress-tested.

> So, I back-ported the recent security patch and other miscellaneous fixes
> to 0.9.8i instead. I won't be adopting the 0.9.8j+ releases until the
> new FIPS code undergoes significant field testing.

Thanks for the patches. My OpenSSL version is based on 0.9.8e to
which I added all security patches (I've checked your list and all
of those are in my version too) but now I finally wanted to be
"up-to-date" to avoid having to roll my own patches (and getting
complaints from users that my version isn't "secure" because it has
an older version number). Unfortunately it isn't as simple as it
should have been.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to