openssl | RH Enterpsie | 0.9.7a??

cooch17_at_NOSPAMverizon.net
Date: 12/21/04 

Date: Mon, 20 Dec 2004 21:37:33 -0500

Greetings -

I seem to run into this sort of problem with some frequency with
Redhat, so I'm hoping someone can offer a general suggestion on how to
proceed.

Redhat Enterprise WS comes with openSSL 0.9.7.a, as indicated by rpm
-q openssl. However, the current version of openssl is 0.9.7e, which
I'd like to upgrade to.

Fine - an easy build from the openssl tarball and we're done, right?
Nope. As seems to often be the case, Redhat has decided to install
openssl in non-standard directories. For example, the normal openssl
config from sources puts everything relative to /usr/bin/ssl, wheras
the Redhat RPM seems to put *most things* relative to /usr/bin. This
is a pain. I tried making a symbolic link for openssl in /usr/bin to
point to the 0.9.7e files in /usr/bin/ssl, but that doesn't seem to
work (i.e., when I compile an app using openssl - say, Apache - it
still uses the 0.9.7a defaults).

I'd rather not unload the oepnssl RPM and then install from the
tarball, since every other time I;ve tried that something has broken
along the way. Moreoever, I'd rather not try to overwrite the 0.9.7a
files with the 0.9.7e files, since I'm not sure there is an obvious
way to match the Redhat directory structure using the openssl
configure script.

Any suggestions? I really wish RH would not deviate from default
directories - makes doing updates a real pain.

Thanks...

Relevant Pages

  • Re: Redhat and OpenSSL Manner
    ... I red that redhat never change version of openssl but it's updating. ... enhancements and new features might be backported from newer versions too if they are not introducing any compatibility problems (for example this is often done for kernel package in RHEL to support new hardware). ... If you look into the SRPM packages, you'll see that they contain original unchanged source code wich is the same version as the package version, and also bunch of patches that get applied to that source code prior to compilation. ...
    (RedHat)
  • Re: openssh rpms for RH6.2
    ... If 0.9.6 is indeed a prereq, the RPM maintainer could have avoided an ... there are a couple of defines that reference Redhat in ... the SPEC. ... is anyone aware of a problem rebuilding an openssl SRPM from a RH ...
    (comp.security.ssh)
  • New OpenSSL remote vulnerability (issue date 2003/10/02)
    ... Mr. Hornik discovered remote vulnerability in OpenSSL package provided ... Affected are all RedHat distributions up to version 8.0 including. ...
    (Bugtraq)
  • Installing new openssl and openssh on RedHat 8.x/9.x
    ... I am about to embark on a round of upgrades for OpenSSL and ... OpenSSH on some systems that are running RedHat 8.0 and 9.0. ... packages are installed from the distro .rpm files. ... libraries are a bit more complicated especially for other dependent products ...
    (comp.security.ssh)
  • .configure failing on redhat 3.0.3
    ... checking whether snprintf correctly terminates long strings... ... checking OpenSSL header version... ... configure: error: OpenSSL version header not found. ... Do you know what is causing this, I had no trouble on the other redhat ...
    (comp.security.ssh)