Re: [users@httpd] Apache and Upgrading OpenSSL

2014-05-16 Thread Loyall, David
Please consider updating http://httpd.apache.org/download.cgi to reflect the information given in the message below. > Date: Fri, 18 Apr 2014 15:10:10 -0400 > From: Christopher Schultz > Subject: Re: [users@httpd] Apache and Upgrading OpenSSL [...] > The httpd project no lon

RE: [users@httpd] Apache and Upgrading OpenSSL

2014-04-18 Thread Cabell, Jeff
ssage- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Friday, April 18, 2014 3:10 PM To: users@httpd.apache.org Subject: Re: [users@httpd] Apache and Upgrading OpenSSL * PGP Signed by an unknown key JEff, On 4/18/14, 2:59 PM, Cabell, Jeff wrote: > So you're saying th

Re: [users@httpd] Apache and Upgrading OpenSSL

2014-04-18 Thread Christopher Schultz
JEff, On 4/18/14, 2:59 PM, Cabell, Jeff wrote: > So you're saying that 2.2.27 and 2.4.9 are not actually current > releases for Windows...just for *nix? The httpd project no longer provides binaries of any kind. Most Linux distros directly package httpd, and anyone can compile it themselves, too.

Re: [users@httpd] Apache and Upgrading OpenSSL

2014-04-18 Thread Eric Covener
On Fri, Apr 18, 2014 at 2:59 PM, Cabell, Jeff wrote: > So you're saying that 2.2.27 and 2.4.9 are not actually current releases for > Windows...just for *nix? No, that source code is what the project releases. While it's confusing, binaries have always been at the discretion of comitters who wa

RE: [users@httpd] Apache and Upgrading OpenSSL

2014-04-18 Thread Cabell, Jeff
f.cab...@xerox.com www.xerox.com/businessservices -Original Message- From: Eric Covener [mailto:cove...@gmail.com] Sent: Friday, April 18, 2014 2:55 PM To: users@httpd.apache.org Subject: Re: [users@httpd] Apache and Upgrading OpenSSL On Fri, Apr 18, 2014 at 2:51 PM, Cabell, Jeff wrote: > A

Re: [users@httpd] Apache and Upgrading OpenSSL

2014-04-18 Thread Eric Covener
On Fri, Apr 18, 2014 at 2:51 PM, Cabell, Jeff wrote: > And while on the subject, can anyone tell me why the download page, and > mirrors for Apache 2.4.9 and 2.2.27 only contain 2.0.65 and 2.2.25? Windows binary builds have not been contributed by any comitters in quite some time. Third-party s

RE: [users@httpd] Apache and Upgrading OpenSSL

2014-04-18 Thread Cabell, Jeff
Yes. Windows Server 2008. Thanks to other vulnerabilities that were apparently located on the last security scan, I have been instructed to upgrade to 1.0.1g. We're currently running a 0.9.8 version. So I really need to find out what needs to be done for Apache to use the newer version of o

Re: [users@httpd] Apache and Upgrading OpenSSL

2014-04-18 Thread Christopher Schultz
Jeff, On 4/18/14, 12:23 PM, Cabell, Jeff wrote: > I'm working on doing some upgrade testing to mitigate the Heartbleed > issue and some other vulnerabilities. Part of that is updating > OpenSSL, but I'm a bit confused about something and am hoping that > someone can help me. I've done at least a

[users@httpd] Apache and Upgrading OpenSSL

2014-04-18 Thread Cabell, Jeff
I'm working on doing some upgrade testing to mitigate the Heartbleed issue and some other vulnerabilities. Part of that is updating OpenSSL, but I'm a bit confused about something and am hoping that someone can help me. I've done at least a dozen internet searches and can't find the answer. I