[Ach] Disabling SSLv2/3 in openssl compile time

Daniel Kahn Gillmor dkg at fifthhorseman.net
Thu Oct 23 15:28:23 CEST 2014


On Tue 2014-10-21 12:22:04 +0200, Hanno Böck wrote:
> Am Mon, 20 Oct 2014 18:44:56 +0200
> schrieb "L. Aaron Kaplan" <aaron at lo-res.org>:
>
>> Do you have a screen session or some other instructions on how to do
>> this?
>
> Basically you grep for ssl2_ functions in lib and bin dirs and this
> gives you the affected files.
>
> I had to recompile these packages:
 [...]
> net-libs/gnutls

It seems weird and quite likely indicative of a problem if you needed to
recompile gnutls after modifying openssl.  There should be no
dependency, direct or indirect, from gnutls to openssl.

Can you double-check that?

Thanks for doing this work, Hanno!

            --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 948 bytes
Desc: not available
URL: <http://lists.cert.at/pipermail/ach/attachments/20141023/13a23a5c/attachment.sig>


More information about the Ach mailing list