On Wed, Jun 2, 2010 at 3:16 AM, Issac Goldstand <[email protected]> wrote: > On 6/1/2010 6:37 PM, Igor Galić wrote: >>> >>> * Solaris 10: 0.9.7 with backports... don't recall what's in the >>> Coolstack but someone else may be able to tell us. >>> >> >> The Coolstack and the Webstack both use the system's SSL bindings. >> Coolstack symlinks it: libssl.so.0.9.7 => >> /usr/sfw/lib/libssl.so.0.9.7 >> >> lrwxrwxrwx 1 root root 28 Jul 13 2009 /opt/coolstack/lib/libssl.so.0.9.7 >> -> /usr/sfw/lib/libssl.so.0.9.7 >> >> while webstack links it directly: libcrypto.so.0.9.7 => >> /usr/sfw/lib/libcrypto.so.0.9.7 >> >> Bye, >> > > Didn't coolstack officially die? It's been replaced by glassfish IIRC... > As such, it's not a good example
Both Coolstack and GlassFish Web Stack are irrelevant to this discussion as they do not provide OpenSSL. (As a completely separate issue, there's no reason to expect a generally available update from either of them.) Solaris 10 is apparently stuck at OpenSSL 0.9.7 + a growing number of back-ported security fixes.
