OpenSSL

2014-04-07 Thread Ludwig
Thanks to the maintainers for pushing out today’s patch with a quickness. What else do I need to do about the addressed vulnerability besides updating the port — generate new keys or what? ___ macports-users mailing list macports-users@lists.macosfor

Re: OpenSSL

2014-04-07 Thread
On 8. April 2014 05:34:28 MESZ, Ludwig wrote: >What else do I need to do about the addressed vulnerability besides >updating >the port — generate new keys or what? ...as far as i informed about the current security notice / patch in OpenSSH (!) it makes no sense to generate new host or client ke

Re: OpenSSL

2014-04-07 Thread René J . V . Bertin
Hello, I wonder, how feasible would it be to replace the system OpenSSL with the one from MacPorts? If security updates are pushed this quickly it would make sense for just about any OS X version, but even more so for those of us still running 10.6 ... R. On Tuesday April 08 2014 08:24:16 Nie

Re: OpenSSL

2014-04-07 Thread Ned Deily
In article <2628775.Ob0fHhrzob@patux>, René J.V. Bertin wrote: > I wonder, how feasible would it be to replace the system OpenSSL with the one > from MacPorts? If security updates are pushed this quickly it would make > sense for just about any OS X version, but even more so for those of us sti