[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] CERT Advisory CA-2002-27 Apache/mod_ssl Worm Upgrade Fix



Login to your Raq server as admin and su to root.
 cd to /usr/local/src
 wget http://www.openssl.org/source/openssl-0.9.6g.tar.gz
 tar xzvf openssl-0.9.6g.tar.gz
 rm openssl-0.9.6g.tar.gz
 cd openssl-0.9.6g/

## I did some digging on the Raq4 and our Debians. The stock config will
## place a ssl directory in /usr/local/ssl and I think that Cobalt is in
## /usr/share/ssl. Also both Debian and Cobalt have a /usr/bin/openssl so
## all should be okay.

 ./config ##will run and say that certain files exits. Don't worry.
 make ##this takes a while, figure you told the kids to do dishes:))
 make install

Thanks for the explicit directions, it is greatly appreciated. A few notes in case anyone runs into this: the wget would not work for me, I think because of firewall issues. I copy/pasted the link to my 2000 box, downloaded, then ftp'd to the RAQ. Then I had to do it again because the 1st downloaded file was corrupted (wouldn't you know it). For simplicity, I copy pasted the above msg to a text file and put it in the /usr/local/src directory for fast reference and copy/paste of commands - I chose to not batch them in case of an error I wanted to know which step it was. I appreciated the detail reminding me to remove the .gz file (thoughtful of you).

So would recompiling OpenSSL-0.9.5g using the --flags and tell it to do
--prefix=/usr/share/ssl actually install over the Sun/Cobalt openssl's
current version. I guess my question is where are the files on Cobalt when a
stock install is /usr/local/ssl?? This is surely not rocket scientist stuff.

Okay, now that I did it all, do I have to re-do it with some other options? If so, would you please be as specific as you were previously, it is truly appreciated - by me of course, and I'm sure by a bunch of others who just aren't bold enough to say they don't know how to do this stuff without assistance :)

Thanks,

Jale