On Thu, Aug 11, 2016 at 03:48:59PM +0800, Tinker wrote: > On 2016-08-11 15:38, Tinker wrote: > >On 2016-07-28 22:54, Frank Groeneveld wrote: > >>On Thu, Jul 28, 2016 at 12:54:52PM +0100, Stuart Henderson wrote: > >>>On 2016/07/28 01:02, Tinker wrote: > >>>> On 2016-07-27 16:36, Frank Groeneveld wrote: > >>>> > Attached patch updates wkhtmltopdf to the latest release. Some > >>>> > important > >>>> > security fixes (OpenSSL updates) were added .. > >>>> > >>>> Can't it use the system's LibreSSL version?? > >>>> > >>> > >>>I'm pretty sure it is, otherwise we wouldn't have needed the > >>>OPENSSL_NO_SSL3 > >>>patches. > >> > >>Yes, it doesn't use the bundled OpenSSl version, sorry for the > >>confusion. It seems [..] > > (Wait, by "does not use the bundled OpenSSL version", you mean that the > Wkhtmltopdf OpenBSD port not uses the *OS-*bundled *LibreSSL* library > right?) >
With bundled I mean the library that comes in the wkhtmltopdf "bundle". As you can see we need patches to let the build know that the base LibreSSL doesn't support SSLv3, which leads me and Stuart to think that it uses the LibreSSL from base. I see Stuart has committed this update already. Thanks Stuart! Frank
