PHP and OpenSSL update
| From: | Federico Petronio | Date: | Thu, 25 Mar 2004 17:49:06 +0000 |
| Subject: | PHP and OpenSSL update | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-181501@lists.php.net to get a copy of this message | ||
Hello...
I reclently upgraded the OpenSSL to stay ahead of some new
vulnerabilities dicovered in 0.9.7c, the new installation (0.9.7d)
replaced the libssl.so and libcrypto.so files.
Aftes the upgrade I restarted Apahce (and PHP) but the phpinfo function
still shows the old versión of openssl in the corresponding section. My
question is: PHP is running the new o the old one?
OpenSSL support enabled
OpenSSL Version OpenSSL 0.9.7c 30 Sep 2003
PHP was compilled with:
./configure --with-mysql --with-gd --with-apxs2=/apache2/bin/apxs
--with-ldap --sharedstatedir=/tmp --enable-memory-limit=yes
--enable-debug=no --with-zlib --with-kerberos=no
--prefix=/usr/local/chroot/www/usr/local --with-gettext --with-xml
--with-imap=../imap-2002e --without-imap-ssl
--with-openssl=/usr/local/ssl --with-jpeg-dir=/usr/local
--with-config-file-path=/apache2/conf --enable-ftp=shared
that mean "use OpenSSL as dymanic librarys", isn't it?
Thank you...
--
Federico Petronio
petrus@activesec.biz