On Wed, 2002-07-31 at 12:44, Brian C. Hill wrote: > I suggest moving the libs to another name using mv just before > you actually install the newly built openssl and the restarting qpopper > just after that. The 'mv' will not affect with programs that already > have files open (libraries, for example).
Good point! In fact, not doing this has locked some people out of remote systems because their sshd server had its SSL support knocked out from under it before the new library had been tested. I've also seen it suggested that one use PRELOAD on the SSL libraries to keep them in memory. See the SlashDot thread for some discussion about this. This shouldn't affect file handles already open, but I get the impression that some dynamic linker implementations re-open the library for each new API connection, and the PRELOAD would force all symbols to be resolved right away, before the library was moved to a new name.
