OpenWrt Forum Archive

Topic: Heartbleed

The content of this topic has been archived on 21 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

I have gotten latest via the scripts and am trying to get the latest openssl packages to include in my build so we are not affected by the heartbleed bug (version g of OpenSSL).  I can download the packages from the download, but I can't seem to get the build to pull the latest package.  I keep getting version e.

Can anyone tell me how to change it to pull version e of OpenSSL?

Spencer

So I updated the Makefile with this patch:

https://dev.openwrt.org/changeset/40421

and now I am getting this when I tried to build:

Applying ./patches/110-optimize-for-size.patch using plaintext:
patching file Configure
Hunk #1 succeeded at 403 (offset 1 line).

Applying ./patches/120-cisco-dtls-fix.patch using plaintext:
patching file ssl/s3_cbc.c
Hunk #1 FAILED at 148.
1 out of 1 hunk FAILED -- saving rejects to file ssl/s3_cbc.c.rej
Patch failed!  Please fix ./patches/120-cisco-dtls-fix.patch!

Any ideas?

You need to remove the patches directory after bumping the OpenSSL version.

The discussion might have continued from here.