[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: spiped build issues on OS X



On 08/30/14 16:32, Dominyk Tiller wrote:
> Yeah, over at Homebrew we took the decision to start pushing
> everything we come across onto our provided OpenSSL, due to the
> security vulns of using depreciated connections.

Makes sense, especially given the ancient OpenSSL in OS X.

> I'm not sure what MacPorts and Fink do in regards to this package
> though. It might be worth checking those out to see if they're also
> rolling with an updated OpenSSL dep.
> 
> As for people who download and build the source from scratch
> themselves, perhaps it's worth editing the BUILDING document to
> specify you really should be using a newer OpenSSL on OS X.

Absolutely.  Can you suggest appropriate wording?  I don't know what
options are required to point the linker at a different OpenSSL.

-- 
Colin Percival
Security Officer Emeritus, FreeBSD | The power to serve
Founder, Tarsnap | www.tarsnap.com | Online backups for the truly paranoid