https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86404#M2864 <P>(A) Splunk's OpenSSL is bundled into Splunk as a private copy. Splunk does not care what your "system" OpenSSL is.</P> <P>(B) Splunk maintains OpenSSL (and several other bundled components) as part of their overall release process. You should not expect to upgrade "just" Splunk's OpenSSL w/o upgrading Splunk itself. More info is available on <A href="http://splunk-base.splunk.com/answers/6653/how-do-splunk-releases-integrate-security-patches-for-dependent-libraries">http://splunk-base.splunk.com/answers/6653/how-do-splunk-releases-integrate-security-patches-for-dependent-libraries</A></P> Tue, 04 Oct 2011 20:37:47 GMT dwaddle 2011-10-04T20:37:47Z https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86401#M2861 <P>Current project I am working on require that OpenSSL be upgraded to at least 0.9.8r (with experimental "ECCdraft" ciphersuites disabled) or 1.0.0e. Specifically, OpenSSL 0.9.8p is cited as vulnerable.<BR /> Could you tell me if OpenSSL used by Splunk can be upgraded to 0.9.8r? Or can it be configured to simply use the existing installation of OpenSSL on the server so that we don’t always have to upgrade two copies on each server.</P> <P>The version we are using is 4.2.1.</P> Tue, 04 Oct 2011 19:53:45 GMT https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86401#M2861 fi5033 2011-10-04T19:53:45Z https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86402#M2862 <P>If you review the open source license definitions that are distributed with splunk you should be able to ascertain the version of openssl you are running. I am using Splunk 4.1.8 and the license documents were located here: /opt/splunk/share/splunk/3rdparty. According to Copyright-for-openssl-0.9.8n.txt I should expect openssl 0.9.8n to be in my copy of Splunk.</P> Tue, 04 Oct 2011 20:01:34 GMT https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86402#M2862 jasonnadeau 2011-10-04T20:01:34Z https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86403#M2863 <P>The version of openssl came with 4.2.1 is 0.9.8p. </P> <P>bash-3.00$ ls Copyright-for-open*<BR /> Copyright-for-openssl-0.9.8p.txt</P> <P>Still seeking to upgrade 0.9.8p to 0.9.8r and not sure if this is even doable?</P> Tue, 04 Oct 2011 20:15:11 GMT https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86403#M2863 fi5033 2011-10-04T20:15:11Z https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86404#M2864 <P>(A) Splunk's OpenSSL is bundled into Splunk as a private copy. Splunk does not care what your "system" OpenSSL is.</P> <P>(B) Splunk maintains OpenSSL (and several other bundled components) as part of their overall release process. You should not expect to upgrade "just" Splunk's OpenSSL w/o upgrading Splunk itself. More info is available on <A href="http://splunk-base.splunk.com/answers/6653/how-do-splunk-releases-integrate-security-patches-for-dependent-libraries">http://splunk-base.splunk.com/answers/6653/how-do-splunk-releases-integrate-security-patches-for-dependent-libraries</A></P> Tue, 04 Oct 2011 20:37:47 GMT https://community.splunk.com/t5/Security/OpenSSL-0-9-8p-to-0-9-8r-or-1-0-0e/m-p/86404#M2864 dwaddle 2011-10-04T20:37:47Z