[cobalt-security] openssl upgrade

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

================ No guarantees, and no warranties ==========
                 ====== informational only ======
            === if you try it please post results ===

1) ssh to server
2) su -
3) cd /usr/local/src
4) wget http://www.openssl.org/source/openssl-engine-0.9.6g.tar.gz
5) tar -zxvf openssl-engine-0.9.6g.tar.gz
6) rm openssl-engine-0.9.6g.tar.gz
7) cd openssl-engine-0.9.6g
8)  ./configure
9)   make
10)  make install  (puts ssl in /usr/local/ssl, won't hurt)
11) wget http://www.apache.org/dist/httpd/old/apache_1.3.20.tar.gz
    I did not use this one, but it should work
    if not holler!
12) tar -zxvf apache_1.3.20.tar.gz
13) rm apache_1.3.20.tar.gz

14) wget http://www.modssl.org/source/mod_ssl-2.8.4-1.3.20.tar.gz
15) tar -zxvf mod_ssl-2.8.4-1.3.20.tar.gz
16) rm mod_ssl-2.8.4-1.3.20.tar.gz

17) cd mod_ssl-2.8.4-1.3.20
18) ./configure --with-apache=../apache_1.3.20/ \
            --with-apxs=/usr/sbin/apxs \
            --with-ssl=../openssl-engine-0.9.6g

19) cp /etc/httpd/modules/libssl.so /etc/httpd/modules/libssl.so.save
20) cp pkg.sslmod/libssl.so /etc/httpd/modules/
21) /etc/rc.d/init.d reload
  httpd may need restart, but try reload

Gerald
--
http://frontstreetnetworks.com | http://raqware.com
229 Front Street, Ste. C, New Haven, CT. 06513-3203
Phone: +1 203-785-0699