Re: FreeBSD's heartbleed response

Unless I misunderstood earlier emails, the heartbeat extension os ALREADY disabled in base, therefore FreeBSD base isn't vulnerable and the only problem is people who installed a newer OpenSSL from ports.

Cheers,
Merijn

----- Reply message -----
From: "Nathan Dorfman" <[e-mail]>
To: "Mike Tancsa" <[e-mail]>
Cc: <[e-mail]>
Subject: FreeBSD's heartbleed response
Date: Tue, Apr 8, 2014 20:05

Someone please correct me if I'm wrong, but I think simply adding
-DOPENSSL_NO_HEARTBEATS to crypto/openssl/Makefile (and recompiling!) is
sufficient to remove the vulnerability from the base system.

-nd.
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"