[ale] openssl related software question

[jenn at colormaria.com]

> Calm down! When RedHat said "restart the server", they meant the
> SERVICE, not the box. So, yes after you install the opennssl upgrades,
> you WILL have to restart apache and friends.

*clearing throat* ahem: from
http://online.securityfocus.com/archive/1/285019/2002-07-28/2002-08-03/0
bugzilla post to bugtraq:
"we advise users to reboot their systems after installing
these updates."

reboot the system and restart the server are two entirely separate creatures,
my friend. ;)  I understand why they would say it, I just found it somewhat
alarming that they would so casually toss off a M$ism.

>
> ldd on openssh will not show a dependency on openssl since ssh doesn't
> depend use ssl. But it uses the crypto libs packaged with openssl.
>

My glaring ignorance of libraries is showing like a beacon here...ldd sshd
does show libcrypto.so, but it's the one that was installed when I installed
redhat (/usr/lib/libcrypto.so and not /usr/local/ssl/lib/ ...default
compile ofopenssl doesn't even *create* a shared object).

Thanks for the response, I think I may be on the right track now but may be
back with more stupid questions

jenn
not afraid to show my ignorance to the world, or at least the ALE list. :)




---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.