[WBEL-devel] Re: openssl security update needed

Rich McCue rmccue@law.uvic.ca
Fri, 19 Mar 2004 14:48:55 -0800


This is a multi-part message in MIME format.
--------------000202020509070203070504
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

This has been an interesting exercise for me.  I believe that I have 
successfully
built the RPMS for the openssl patch. I've installed the updated rpms on 
my test
server, and ssl seems to be functioning just fine.   The only difference 
is that
when I go into webmin and look at the package, the vendor displayed is:
"(none)"  rather than "whiteboxlinux.org".  For those who are intested 
I'll outline
how I went about building the rpms (for those who know more than I do on
the list, I welcome feedback as this is the first time I've done this).

1. entered the following commands (I found them on a web site some where):

   mkdir -p --verbose ~/rpms/{BUILD,RPMS,SOURCES,SPECS,SRPMS}
   mkdir -p --verbose ~/rpms/RPMS/{i386,noarch}
   echo "%_topdir $HOME/rpms" > ~/.rpmmacros

2. Downloaded the updated src.rpm
  
   wget 
http://ftp.redhat.com/pub/redhat/linux/updates/enterprise/3AS/en/os/SRPMS/openssl-0.9.7a-33.4.src.rpm

3. Installed openssl-0.9.7a-33.4.src.rpm using the following command:

   rpm -i openssl-0.9.7a-33.4.src.rpm

4. navigated to ~/rpms/SPECS/ and then issue the following commands:

   rpmbuild -ba --target i386 openssl.spec
   rpmbuild -ba --target i486 openssl.spec
   rpmbuild -ba --target i586 openssl.spec
   rpmbuild -ba --target i686 openssl.spec
   rpmbuild -ba --target athlon openssl.spec

   The files are put in the respective directories under ~/rpms/RPMS/

Again, please let me know if you see anything that I should have done 
differently.

If anyone is interested, I can make the files available (I'm just 
finishing the i586 rpm now).

-- 
*Rich McCue*
UVic Faculty of Law
ph: 250.472.4716
www.law.uvic.ca <http://www.law.uvic.ca>

--------------000202020509070203070504
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <title></title>
</head>
<body>
This has been an interesting exercise for me.&nbsp; I believe that I have
successfully<br>
built the RPMS for the openssl patch. I've installed the updated rpms
on my test<br>
server, and ssl seems to be functioning just fine.&nbsp;&nbsp; The only
difference is that <br>
when I go into webmin and look at the package, the vendor displayed is:<br>
"(none)"&nbsp; rather than "whiteboxlinux.org".&nbsp; For those who are intested
I'll outline <br>
how I went about building the rpms (for those who know more than I do on<br>
the list, I welcome feedback as this is the first time I've done this).<br>
<br>
1. entered the following commands (I found them on a web site some
where):<br>
<br>
&nbsp;&nbsp; mkdir -p --verbose ~/rpms/{BUILD,RPMS,SOURCES,SPECS,SRPMS}<br>
&nbsp;&nbsp; mkdir -p --verbose ~/rpms/RPMS/{i386,noarch}<br>
&nbsp;&nbsp; echo "%_topdir $HOME/rpms" &gt; ~/.rpmmacros<br>
<br>
2. Downloaded the updated src.rpm<br>
&nbsp;&nbsp; <br>
&nbsp;&nbsp; wget
<a class="moz-txt-link-freetext" href="http://ftp.redhat.com/pub/redhat/linux/updates/enterprise/3AS/en/os/SRPMS/openssl-0.9.7a-33.4.src.rpm">http://ftp.redhat.com/pub/redhat/linux/updates/enterprise/3AS/en/os/SRPMS/openssl-0.9.7a-33.4.src.rpm</a><br>
<br>
3. Installed openssl-0.9.7a-33.4.src.rpm using the following command:<br>
<br>
&nbsp;&nbsp; rpm -i openssl-0.9.7a-33.4.src.rpm<br>
<br>
4. navigated to ~/rpms/SPECS/ and then issue the following commands:<br>
<br>
&nbsp;&nbsp; rpmbuild -ba --target i386 openssl.spec<br>
&nbsp;&nbsp; rpmbuild -ba --target i486 openssl.spec<br>
&nbsp;&nbsp; rpmbuild -ba --target i586 openssl.spec<br>
&nbsp;&nbsp; rpmbuild -ba --target i686 openssl.spec<br>
&nbsp;&nbsp; rpmbuild -ba --target athlon openssl.spec<br>
<br>
&nbsp;&nbsp; The files are put in the respective directories under ~/rpms/RPMS/<br>
<br>
Again, please let me know if you see anything that I should have done
differently.<br>
<br>
If anyone is interested, I can make the files available (I'm just
finishing the i586 rpm now).<br>
<br>
<div class="moz-signature">-- <br>
<b>Rich McCue</b><br>
UVic Faculty of Law<br>
ph: 250.472.4716<br>
<a href="http://www.law.uvic.ca">www.law.uvic.ca</a><br>
</div>
</body>
</html>

--------------000202020509070203070504--