OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Markus Friedl (markus_at_openbsd.org)
Date: Mon Sep 23 2002 - 09:14:31 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Mon, Sep 23, 2002 at 10:24:53AM +0200, Markus Friedl wrote:
    > On Sat, Sep 21, 2002 at 09:43:48AM -0700, nestlerspeakeasy.net wrote:
    > > > On Fri, Sep 20, 2002 at 09:05:59AM -0400, Eric Maiwald wrote:
    > > > > Does anyone
    > > > > know if the same issues affecting OpenSSL on Apache will affect OpenSSL
    > > > > when used with OpenSSH?
    > > >
    > > > yes.
    > > >
    > > > the "issues affecting OpenSSL on Apache" do not affect OpenSSH.
    > > >
    > > > OpenSSH does not use libssl (only libcrypto).
    > >
    > > You seem to imply that all of OpenSSL's problems are in libssl,
    > > which is not the case.
    >
    > no. it does not. i just refer to "issues affecting OpenSSL on Apache".

    oops, i forgot to add: you should still update the OpenSSL libcrypto
    library, since it's not know how the ASN.1 bugs affect software using
    libcrypto (and OpenSSH uses libcrypto).