Re: [cobalt-users] is this what we've been discussing - CERT Advisory CA-2002-27 Apache/mod_ssl Worm

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

GW> Date: Sun, 15 Sep 2002 10:57:36 -0400
GW> From: Gerald Waugh


GW> I have not tried 'g'. I am, and have been running 'e' for
GW> quite some time.

0.9.6g came out about a week and a half after "e".  I've had no
problems with it.  "f", however, was a pain to install and
required much manual effort.

Has anyone tried running OpenSSL with "no-ssl2" fed to Configure?
It appears there is such an option, but I've not attempted.  (I
always use no-idea and no-rc5 to compile out patented-in-the-US
code, with no trouble at all.)


GW> It will not affect SSH from pkgmaster as they used a 'static'
GW> library (it's compiled into the package)

Correct.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.