[clue] RHEL 5.6 and OpenSSL questions

[Mike Nolte]

As you seem to know, the short answer is that you probably can't do it
without breaking packaging, at least a li'l.  The longer answer depends on
what else is installed on the machine and reliant on OpenSSL.  You'd
ultimately have to compile from source.  You could make a package from that
compilation, and you could even set the version on the package to fool
other packages into believing that it isn't the version that it is.
Applications may well break, though.  It all depends on the ones that you
care about and how they operate.  On the bright side, you're immune to
Heartbleed!

Now, the obvious question: why not upgrade/migrate?

On Sat, Sep 5, 2015 at 11:27 AM, Sean LeBlanc <seanleblanc at comcast.net>
wrote:

> I was wondering if anyone here has any advice on upgrading OpenSSL on
> RHEL 5.6 w/o updating to a newer RHEL version (5.x or 6.x or something
> else)?
>
> It seems RHEL 5.6, at least w/o going off the vendor reservation, tracks
> 0.9.8 something (e?), and RH backports security fixes, from what I can
> tell.
>
> It'd be nice to get TLS 1.2 especially, but I'm not sure how easy that
> is w/o doing a broader upgrade.
>
> _______________________________________________
> clue mailing list: clue at cluedenver.org
> For information, account preferences, or to unsubscribe see:
> http://cluedenver.org/mailman/listinfo/clue
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cluedenver.org/pipermail/clue/attachments/20150905/69425e4b/attachment.html