[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Why Fedora 10 still uses openssl pkg from 2007, 4 releases old?



Rick Stevens wrote:
Frantisek Hanzlik wrote:
After upgrading from F7 to F10 it's unable (for me, but on several sites)
access to sendmail daemon with authenticated access by either TLS
(port 25)
or SSL (port 465) protocols from M$ Outlook (Express too). I still make
on right description this issue, its look like some problem in
certificate
exchange.
But no matter how it's related with, surprising for me is fact,
that Fedora 10 uses openssl package version 0.9.8g released in 2007,
while actual released version is 0.9.8j, four versions newer.

If you check the source RPM's spec file, you'll see that most (if not
all) of the "j" patches have been backported to the "g" version. The
trick is that the "j" version bumps the .so for /lib[64]/libcrypto.so.7
and /lib[64]/libssl.so.7 from ".7" to ".8" and a lot of existing code
would break because they want .7. Hope that explains it for you.

----------------------------------------------------------------------
- Rick Stevens, Systems Engineer ricks nerd com -
- AIM/Skype: therps2 ICQ: 22643734 Yahoo: origrps2 -
- -
- If you're not part of the solution, you're part of the precipitate -
----------------------------------------------------------------------

Rick, thank for Your response.
But - yes, I know just was released F10 openssl pkg 0.9.8g release 12,
and I read it's changelog, thus I know what was backported to this.

But I'm not agree about You these "lot of existing code would break
 because ..", as when I ask:

rpm -q --whatrequires openssl

tinyca2-0.7.5-4.fc10.noarch
dovecot-1.1.7-1.fc10.i386
openldap-servers-2.4.12-1.fc10.i386
nash-6.0.71-3.fc10.i386
NetworkManager-0.7.0-1.git20090102.fc10.i386
sendmail-8.14.3-3.fc10.i386
openssl-devel-0.9.8g-12.fc10.i386
openssl-perl-0.9.8g-12.fc10.i386

(and I have relative large system with packages from rpmfusion, dries,
atrpms, planetccrma and others) - thus, I think, only packages
depend on openssl are some little from Fedora own repository.
I'm right?

Franta Hanzlik


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]