openssl-1.0.1a

unix Security

openssl-1.0.1a が出ていたので ssh と bind をリビルドしておいた。
確認しておく

%ssh -V
OpenSSH_5.9p1, OpenSSL 1.0.1 14 Mar 2012

OpenSSL をビルド

cd /usr/local/src
wget http://www.openssl.org/source/openssl-1.0.1a.tar.gz
tar zxf openssl-1.0.1a.tar.gz
cd openssl-1.0.1a
./config
make
make test
make install

OpenSSH をリビルド

cd /usr/local/src/openssh-5.9p1
make distclean
./configure --with-tcp-wrappers --with-ssl-dir=/usr/local/ssl --with-zlib=/usr/local --sysconfdir=/usr/local/etc/ssh
make
make install
/etc/rc.d/sshd restart

確認しておく

%rehash
%ssh -V
OpenSSH_5.9p1, OpenSSL 1.0.1a 19 Apr 2012

ついでに bind もリビルド

cd /usr/local/src/bind-9.9.0
make distclean
./configure --with-openssl=/usr/local/ssl
make
bin/tests/system/ifconfig.sh up
make test
make install
/etc/rc.d/named restart

確認しておく

%/usr/local/sbin/named -V
BIND 9.9.0 built with '--with-openssl=/usr/local/ssl'
using OpenSSL version: OpenSSL 1.0.1a 19 Apr 2012
using libxml2 version: 2.7.8