2.3.4 server users (SSL heartblead and CVEs)

[Franz Skale]

Thanks Thomas,
Good to hear. 
A transition and evaluation takes time !
It's good, the old kolab version could be fixed easily. I hate to be working on a severe vulnerable system ;-)

So, keep on.

Rgds. Franz

Telepathisch gesendet

> Am 25.06.2014 um 17:50 schrieb Thomas Spuhler <thomas.spuhler at btspuhler.com>:
> 
>> On Wednesday, June 25, 2014 11:50:11 AM Franz Skale wrote:
>> Perhaps it's off topic or no one using 2.3.4 anymore.
>> My transition is still being avaluated and so perhaps others too.
>> So i was quite nervous when hearing about the severe SSL bugs.
>> So, i'm in the middle of transition to the new server environment.
>> But, i wanted to be safe on 2.3.4 too. So i started to port
>> openssl,apache 2.4 and dep packages to openpkg.
>> It works now, only some template changes have been made.
>> Contact me, if you need to fix old running systems.
>> I am safe now, and gradet A+ on ssllabs testing suite.
>> 
>> My packages i recompiled,after porting openssl 1.0.1h and apache 2.4.9:
>> 
>> openssl-1.0.1h-20140605.amd64-debian6.0.2-kolab.rpm
>> postfix-2.8.3-20110531.amd64-debian6.0.2-kolab.rpm
>> imap-2006k-20080101.amd64-debian6.0.2-kolab.rpm
>> imapd-2.3.17-20110928_kolab2.amd64-debian6.0.2-kolab.rpm
>> perl-ssl-5.10.0-20080101_kolab1.amd64-debian6.0.2-kolab.rpm
>> apr-1.5.1-20140421.amd64-debian6.0.2-kolab.rpm
>> libxml-2.8.0-20140622.amd64-debian6.0.2-kolab.rpm
>> apache-2.4.9-20140621.amd64-debian6.0.2-kolab.rpm
>> apache-php-5.3.8-20110913.amd64-debian6.0.2-kolab.rpm
>> 
>> Kind regards
>> 
>> Franz Skale
> 
> This is why it's better to use native packages. The distros upgraded the openssl loooong ago and we 
> don't even use openssl in apache/kolab at Mageia.
> :)
> 
> -- 
> Best regards
> Thomas Spuhler
> 
> All of my e-mails have a valid digital signature
> ID 60114E63
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2552 bytes
Desc: not available
URL: <http://lists.kolab.org/pipermail/users/attachments/20140625/5c38c61f/attachment.p7s>