Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Thu 16 Aug 2018, 11:28
All times are UTC - 4
 Forum index » Off-Topic Area » Security
Openssl update to 1.0.1k
Post new topic   Reply to topic View previous topic :: View next topic
Page 2 of 3 [39 Posts]   Goto page: Previous 1, 2, 3 Next
Author Message
8Geee


Joined: 12 May 2008
Posts: 1629
Location: N.E. USA

PostPosted: Sat 06 Feb 2016, 21:10    Post subject:  

On yout version;
MENU --> Setup --> Updates from Slackware
This will enlighten.

To view your present version
Open Terminal
type openssl version
exit when done

Regards
8Geee

_________________
Linux user #498913

Some people need to reimagine their thinking.
Back to top
View user's profile Send private message 
musher0


Joined: 04 Jan 2009
Posts: 12562
Location: Gatineau (Qc), Canada

PostPosted: Sun 07 Feb 2016, 03:52    Post subject:  

Hello all.

The revival of this thread prompted me to revisit the subject. So I compiled
openssl-1.0.2f on the DPup Wheezy I'm updating. This compilation should
work on any Puppy that has a (e)glibc of 2.13 or more.

(Typing
Code:
ldd --version
in terminal will tell you which version of (e)glibc your Puppy is using.)

You can download it as pets:
https://www.adrive.com/public/Knut3A/openssl-1.0.2f.pet (main archive)
https://www.adrive.com/public/7avQ9B/openssl-1.0.2f_man.pet (separate man files)

... or as an sfs for any Puppy:
https://www.adrive.com/public/WJrAAh/openssl-1.0.2f.sfs

I don't expect anything fishy: it compiled fine from the source at the openssl site
and I tested it on my system -- but let me know if you experience any problems.

openssl-1.0.2f is the latest stable version at this time. A version 1.1.0 exists, but
it is still being tested, and the authors do not recommend it for general use yet.

Enjoy! BFN.

_________________
musher0
~~~~~~~~~~
Siempre será canción nueva... (V. Jara, Manifiesto)
Back to top
View user's profile Send private message 
robert_m

Joined: 02 Feb 2016
Posts: 15
Location: Monterey Bay, California

PostPosted: Sun 07 Feb 2016, 07:15    Post subject:  

8Geee wrote:
On yout version;
MENU --> Setup --> Updates from Slackware
This will enlighten.

To view your present version
Open Terminal
type openssl version
exit when done

Regards
8Geee


It is not clear to me if this was intended to help me decide if I need an upgrade, or directed at another post.
I posted my version (OpenSSL 1.0.1 14 Mar 2012 ) , and do not know which version is needed for Puppy 5.7.1 ( which is not the slackware version: do I care about updates from slackware?) I'm new to Puppy, enlightenment comes slowly!

I failed to plainly ask "Is openssl a good tool to encrypt a single file for later viewing on a flash drive install?'

_________________
- Rob M.
Puppy in My Pocket
Back to top
View user's profile Send private message 
8Geee


Joined: 12 May 2008
Posts: 1629
Location: N.E. USA

PostPosted: Sun 07 Feb 2016, 16:41    Post subject:  

appologies robert_m you are using debian-related. Nonetheless, there 'should' be some update available thru deb-repos if needed. Essentially serrver-certificates on both ends are affected.
_________________
Linux user #498913

Some people need to reimagine their thinking.
Back to top
View user's profile Send private message 
musher0


Joined: 04 Jan 2009
Posts: 12562
Location: Gatineau (Qc), Canada

PostPosted: Sun 07 Feb 2016, 18:20    Post subject:  

8Geee? robert_m?

Please get new glasses? Or maybe you unlearned how to read?

I spent over an hour compiling and uploading the most recent stable openssl for
you guys -- on a Debian Wheezy compatible pup.

You could say: "thank you."


@Robert:

Yes my package should be compatible with Puppy Precise 5.7.1 since that
PrecisePup uses glibc 2.15, a higher version retro-compatible with the glibc 2.13
that I compiled your openssl on.

Another reason is that ubuntu is derived from debian, and therefore ubuntu-type
Puppies are also Debian-compatible Puppies.

The only real way to know is to try it. That's the way it is in PuppyLinux. It can't
break anything. There may be some other dependency I am not aware of on
Precise, but unfortunately, I don't read crystal balls for a living.

If it doesn't work properly, just send me feedback and I'll see what I can do.

Best regards to both of you.

_________________
musher0
~~~~~~~~~~
Siempre será canción nueva... (V. Jara, Manifiesto)
Back to top
View user's profile Send private message 
robert_m

Joined: 02 Feb 2016
Posts: 15
Location: Monterey Bay, California

PostPosted: Sun 07 Feb 2016, 20:26    Post subject:  

Dear musher0 -

My glasses are fine, I responded to 8Geee (at 3:15 AM local time) and then downloaded the sfs file and then back to bed. I live next door to a UCSC student household, and they had decided to have a party that began at 1 AM.

I am just getting around to trying it out, I promise I will report back.

Please be patient, I'm new to Puppy and I'm not very quick, taking notes and whatnot.

I do appreciate the build of the latest, and your recommendation that it should work for me.

Regards,

_________________
- Rob M.
Puppy in My Pocket
Back to top
View user's profile Send private message 
8Geee


Joined: 12 May 2008
Posts: 1629
Location: N.E. USA

PostPosted: Sun 07 Feb 2016, 22:14    Post subject:  

Musher:
appologies

I confused the slacko 5.7.1 with the precise (deb) 5.7.1. I thought robert_m was using slacko, so my comments were in-line. When I looked carefully again, I saw the deb Ubuntu reference, and appologized to him for the confusion I had. I do realize there are different needs for different distro-bases.

It was not my intent to cause a chase down a rabbit hole.

Thank you for your efforts in this matter.

Regards
8Geee

_________________
Linux user #498913

Some people need to reimagine their thinking.
Back to top
View user's profile Send private message 
robert_m

Joined: 02 Feb 2016
Posts: 15
Location: Monterey Bay, California

PostPosted: Sun 07 Feb 2016, 23:28    Post subject:  

This is my second experience with installing packages on Puppy. I am really impressed with how intuitive the interface is, and how many things just work.

I copied the file openssl-1.0.2f.sfs to a partition on my flash drive (from my network share - no setup required)

I found the menu=>setup=>SFS load-on-the-fly utility and loaded the new file.

I the version and date are as before:

Code:
# openssl version -a
OpenSSL 1.0.1 14 Mar 2012
built on: Mon Apr 15 15:27:09 UTC 2013


I rebooted, re-loaded, no difference.

This is probably due to my inexperience.
Should oppenssl show up in the package manager "installed Packages" box? The nvidia driver (pet) I installed is there.
I didn't see any errors when I loaded it.
I unloaded and loaded, got confirmation messages - success- for both operations. Still, the openssl version is not correct.

I moved the sfs file to /root/home ( as instructed in
http://puppylinux.org/wikka/software, repeated the install process, same result except as shown in the attached images

Any help is appreciated.
capture1195.png
 Description   This is the third attempt to load the SFS file.
The file was moved to /root/home/
Notice, it is not flagged "queue"
 Filesize   15.68 KB
 Viewed   467 Time(s)

capture1195.png

capture16272.png
 Description   This is the SFS load on the fly dialog
The sfs file was in a second partiton
 Filesize   17.35 KB
 Viewed   472 Time(s)

capture16272.png


_________________
- Rob M.
Puppy in My Pocket
Back to top
View user's profile Send private message 
slavvo67

Joined: 12 Oct 2012
Posts: 1565
Location: The other Mr. 305

PostPosted: Mon 08 Feb 2016, 00:15    Post subject:  

Only pet files show up as installed. You can convert the sfs to a .pet file with sfs2pet or some other converter on this board. Then, when you click on the pet, it will install and reflect in the PPM.
Back to top
View user's profile Send private message 
musher0


Joined: 04 Jan 2009
Posts: 12562
Location: Gatineau (Qc), Canada

PostPosted: Mon 08 Feb 2016, 01:10    Post subject:  

slavvo67 wrote:
Only pet files show up as installed. You can convert the sfs to a .pet file with sfs2pet or some other converter on this board. Then, when you click on the pet, it will install and reflect in the PPM.
There is a pet available for this, as well as the sfs. Please see above:
http://murga-linux.com/puppy/viewtopic.php?p=888366&sort=lastpost#888366

_________________
musher0
~~~~~~~~~~
Siempre será canción nueva... (V. Jara, Manifiesto)
Back to top
View user's profile Send private message 
watchdog

Joined: 28 Sep 2012
Posts: 1625
Location: Italy

PostPosted: Mon 08 Feb 2016, 05:19    Post subject:  

What about puppy 4.31, wary and lucid? They are no longer supported. I'm not using them but if I should keep one of them in hands then I would experiment a glibc upgrade and use the musher0's openssl pet.

LATER: I have compiled openssl-1.0.2f in wary with glibc 2.10.1. It is not recommended to upgrade core libraries: it's only at your own risk. It works for me and I have tested it but not deeply.

openssl-1.0.2f-w5-i486.pet:

https://drive.google.com/file/d/0B9iMb4UZBeFkbUdkZHNnSEFfMkE/view?usp=sharing

openssl_DEV-1.0.2f-w5-i486.pet:

https://drive.google.com/file/d/0B9iMb4UZBeFkeDNsNWh2RHZWQnc/view?usp=sharing

openssl_DOC-1.0.2f-w5-i486.pet:

https://drive.google.com/file/d/0B9iMb4UZBeFkeXNZZVNicVpld1U/view?usp=sharing

Code:
# openssl version -a
OpenSSL 1.0.2f  28 Jan 2016
built on: reproducible build, date unspecified
platform: linux-elf
options:  bn(64,32) rc4(8x,mmx) des(ptr,risc1,16,long) idea(int) blowfish(idx)
compiler: gcc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -DL_ENDIAN -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
OPENSSLDIR: "/etc/ssl"
Back to top
View user's profile Send private message 
perdido


Joined: 09 Dec 2013
Posts: 891
Location: ¿Altair IV , Just north of Eeyore Junction.?

PostPosted: Mon 08 Feb 2016, 13:38    Post subject:  

robert_m wrote:
This is my second experience with installing packages on Puppy. I am really impressed with how intuitive the interface is, and how many things just work.

I copied the file openssl-1.0.2f.sfs to a partition on my flash drive (from my network share - no setup required)

I found the menu=>setup=>SFS load-on-the-fly utility and loaded the new file.

I the version and date are as before:

Code:
# openssl version -a
OpenSSL 1.0.1 14 Mar 2012
built on: Mon Apr 15 15:27:09 UTC 2013


I rebooted, re-loaded, no difference.

Any help is appreciated.

Here you go!

Follow the instructions here http://www.bleepingcomputer.com/forums/t/531940/how-to-update-ssl-puppy-linux-571/

And you should end up here
Code:
# openssl version -a
OpenSSL 1.0.1 14 Mar 2012
built on: Thu Jan  7 15:13:24 UTC 2016


No re-boot required.
That is the latest from Ubuntu for Precise 12.04

If you google
Code:
precise 12.04 openssl package


About the 3rd hit is http://packages.ubuntu.com/precise/openssl

On the middle-right side of that page, listed under "Ubuntu Resources" is the "Ubuntu Changelog" that will show the changes and dates to the openssl package. Have fun!



.
Back to top
View user's profile Send private message 
robert_m

Joined: 02 Feb 2016
Posts: 15
Location: Monterey Bay, California

PostPosted: Mon 08 Feb 2016, 15:42    Post subject:  

perdido -You have found this! The link that you posted to bleepingcomputer.com is actually how I began: it lead me to return here and ask if upgrading was necessary. Thanks for the pointer to "openssl (1.0.1-4ubuntu5.33) [security] "

Before I go of and try their method, I will finish up with the build that musher0 posted.

~~~~~~

musher
When I installed the openssl-1.0.2f.pet file it installed without incident, and I can see it in "Puppy Package Manager" dialog under " Installed Packages"

and from the command line
Code:
# openssl version -a
OpenSSL 1.0.2f  28 Jan 2016
built on: reproducible build, date unspecified
platform: linux-elf
options:  bn(64,32) rc4(8x,mmx) des(ptr,risc1,16,long) idea(int) blowfish(idx)
compiler: gcc -I. -I.. -I../include  -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -DL_ENDIAN -O3 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
OPENSSLDIR: "/usr/ssl"

(musher0)
My naive conclusion is that
  1. openssl was successfully updated
  2. the build is untested
  3. a sufficient test is to encrypt and decrypt a file
  4. the encrypted file can be decrypted with other past and future versions of openssl and TBD software


I have visited http://www.openssl.org/ and I see the 1.0.2f is the latest release, and considering the build notes
Quote:
(musher0)
Yes my package should be compatible with Puppy Precise 5.7.1 since that PrecisePup uses glibc 2.15, a higher version retro-compatible with the glibc 2.13 that I compiled your openssl on.

Another reason is that ubuntu is derived from debian, and therefore ubuntu-type
Puppies are also Debian-compatible Puppies.


I am off to try using the encryption software. I will report back, for now accept my thanks to all for your attestation and efforts in helping me get the latest code on my system.
openssl_success.png
 Description   
 Filesize   11.59 KB
 Viewed   386 Time(s)

openssl_success.png


_________________
- Rob M.
Puppy in My Pocket
Back to top
View user's profile Send private message 
6502coder


Joined: 23 Mar 2009
Posts: 469
Location: Western United States

PostPosted: Mon 08 Feb 2016, 19:00    Post subject:  

@ musher0 and watchdog: thanks for the PET/SFS builds. Much appreciated.

Edit: @ watchdog: I installed your openssl-1.0.2f-w5-i486.pet on my Wary 5.1.4.1 which has glibc 2.11.1. No problems found so far.
Back to top
View user's profile Send private message 
musher0


Joined: 04 Jan 2009
Posts: 12562
Location: Gatineau (Qc), Canada

PostPosted: Tue 09 Feb 2016, 00:34    Post subject:  

My pleasure! Smile
_________________
musher0
~~~~~~~~~~
Siempre será canción nueva... (V. Jara, Manifiesto)
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 2 of 3 [39 Posts]   Goto page: Previous 1, 2, 3 Next
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0623s ][ Queries: 14 (0.0053s) ][ GZIP on ]