Re: openssl upgrade issue (merged)

[tempo <tempo@zeus.sorcery.ca>]

> If you want to upgrade OpenSSL because of security issues, don't -
> just use CVS or patches.

It is for security reasons that this was done.

There are no openssl patches for 2.9 that I'm aware of. Thus my mistake.
I've never *successfully* used CVS because I've not had the surplus time
to learn the process sufficiently. I hate to sound so incompetant, but
that's life in the trenches for you. Spare time is a luxury. I chose to
use OpenBSD because it offers excellent security in the least amount of
time.

> You attempted to take their software and compile it on OpenBSD. We
> compensate for a lot of bugs in their software.  All sorts of things.

What would your suggested course of action be to correct this with the
minimum amount of down time on a production server?

-Shaun