-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

David,

On 4/10/14, 10:39 AM, David Landis wrote:
> On Wed, Apr 9, 2014 at 1:24 AM, Christopher Schultz < 
> ch...@christopherschultz.net> wrote:
>> 
>> 
>>> (Checked http://filippo.io/Heartbleed before and after) I built
>>> APR and Tomcat Native from source on the server, so I assume
>>> it's doing dynamic library loading.
>>> 
>>> Is the binary build staticly linked? Otherwise, I'm not sure
>>> it's necessary to redo the builds.
>> 
>> The ASF only provides binaries for win32, and yes, they are 
>> statically-linked. Users without the expertise to build their
>> own tcnative binary will have to wait for the tcnative team to
>> roll a new release.
>> 
> 
> 
> What about for Linux? If you originally compiled libtcnative with
> an older OpenSSL, is it sufficient to simply upgrade that OpenSSL,
> or does the libtcnative need to be recompiled? Thanks.

Most people use dynamically-linked libraries in Linux (or everywhere
for that matter... the static-linked win32 library is done for
particular reasons). So simply upgrading OpenSSL on Linux will usually
take care of everything. If you happened to build tcnative yourself
and did so with static-linking against OpenSSL, then you'll have to
re-build.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=J2qI
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to