Re: OpenSSL Patch Instructions: Restart Daemons, yes?

[Rich Ramos <openbsd_(_at_)_RichRamos_(_dot_)_com>]

>> for sshd I see that lib crypto is dynamically linked but I don't see lib
>> ssl.  So does that mean that it doesn't use lib ssl or that it's
statically
>> linked?  How do I know for sure?  I did an 'nm' but the name list has been
>> stripped.
>
> Remember that this patch affects both libssl and libcrypto.

Maybe I don't understand your point and if so I apologize for being obtuse,
but...
I know that this patch effects both libssl and libcrypto, which was what lead
to my question.

When doing an ldd on sshd I see that libcrypto is dynamically linked, so great
I can just restart sshd to pick up that library change.  However, I do not see
that libssl is dynamically linked to sshd.  So to me that could mean one of
two
things:

1. sshd doesn't use it and all is cool after a restart of the deamon.

OR

2. sshd was statically linked with libssl.a at compile time and I going to
have
to recompile sshd completely after applying the patch to pick up the change.

So which one is it, #1 or #2?  Does sshd use libssl or not?

-Rich

[demime 0.98d removed an attachment of type application/pgp-signature]