Re: [users@httpd] Re: Adding SSL support to Apache in Windows

[Joseph R Loegering <Jo...@Loegering.net>]

> Ummm... plugging in mod_ssl 2.0.44 v.s. 2.0.45 should pretty much be
> a noop - not much went on there.  Remember .44 modules *ARE* loadable
> within the 2.0.45 release!
> 
> BUT I would be especially cautious about such a build - since OpenSSL
> itself has several security patches for the timing attacks et. al.  If it wasn't
> built since .45 the author certainly was clueless of any such patches.
> 
> BTW - there is no OpenSSL release yet (that I'm aware of) that covers these
> security vulnerabilities - the fixes seem to be only available as patches.
> 
> Bill
Hi,
I upgraded my server from 2.0.43 to Apache/2.0.45 (Win32) mod_perl/1.99_08-dev Perl/v5.8.0 DAV/2 mod_ssl/2.0.44 OpenSSL/0.9.6h PHP/4.3.1  Where would I get the security patches for the OpenSSl?
Thanks
Joseph

_______________________________________________________
Joseph R Loegering
Joseph@Loegering.net
Loegering.net Administrator





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org