Re: [openssl-users] OpenSSL and detecting whether bugs have been patched

2015-03-05 Thread Jason Woods
> On 5 Mar 2015, at 12:23, Salz, Rich wrote: >> if (!openssl_is_patched("CVE-2014-0160”)) { >> complain_vociferously(); >> } > > That's an interesting idea. Of course the CVE list would grow, so perhaps > arrays of ints are better > Int OPENSSL_cve_fixed(int year, int vuln);; > > ? T

Re: [openssl-users] OpenSSL and detecting whether bugs have been patched

2015-03-05 Thread Salz, Rich
> if (!openssl_is_patched("CVE-2014-0160”)) { >complain_vociferously(); > } That's an interesting idea. Of course the CVE list would grow, so perhaps arrays of ints are better Int OPENSSL_cve_fixed(int year, int vuln);; ? ___ openssl-use

[openssl-users] OpenSSL and detecting whether bugs have been patched

2015-03-05 Thread Graham Leggett
Hi all, I just tried out the most recent version of freeradius (v3.0.7), and it failed to start up with the following message: Thu Mar 5 11:12:33 2015 : Info: Debugger not attached Thu Mar 5 11:12:33 2015 : Error: Refusing to start with libssl version OpenSSL 1.0.1e-fips 11 Feb 2013 0x1000105