openssl-1.0.1b

unix Security

openssl-1.0.1b が出ていたので ssh と bind をリビルドしておいた。
確認しておく

%ssh -V
OpenSSH_6.0p1, OpenSSL 1.0.1a 19 Apr 2012

OpenSSL をビルド

cd /usr/local/src
wget http://www.openssl.org/source/openssl-1.0.1b.tar.gz
tar zxf openssl-1.0.1b.tar.gz
cd openssl-1.0.1b
./config
make
make test
make install

OpenSSH をリビルド

cd /usr/local/src/openssh-6.0p1
make distclean
./configure --with-tcp-wrappers --with-ssl-dir=/usr/local/ssl --with-zlib=/usr/local --sysconfdir=/usr/local/etc/ssh
make
make install
/etc/rc.d/sshd restart

確認しておく

%rehash
%ssh -V
OpenSSH_6.0p1, OpenSSL 1.0.1b 26 Apr 2012

ついでに bind もリビルド

cd /usr/local/src/bind-9.9.0
make distclean
./configure --with-openssl=/usr/local/ssl
make
bin/tests/system/ifconfig.sh up
make test
make install
/etc/rc.d/named restart

確認しておく

%/usr/local/sbin/named -V
BIND 9.9.0 built with '--with-openssl=/usr/local/ssl'
using OpenSSL version: OpenSSL 1.0.1b 26 Apr 2012
using libxml2 version: 2.7.8