Hi Winnie,
The update that breaks stuff came out before Christmas (Dec 5th if I
trust my yum.log). Your link looks like and update to the update.
We've been running this (opensssl 1.0.1 as opposed to 1.0.0) from the
start(*) and while it broke the WMS badly(**), apart from that, we
haven't had any problems with the big VOs or the ops tests. We
currently run openssl-1.0.1e-16.el6_5.1.x86_64 with (mainly) EMI2 (not
UMD!) middleware. You might want to have a close look at your SE
though, I have no idea how Storm (that's what Bristol has, no?)
handles this.
Cheers,
Daniela
(*) "Paranoia are us"
(**) even that seems to work now, as long as you have the latest of everything
On 9 January 2014 09:45, Winnie Lacesso <[log in to unmask]> wrote:
> Dear All,
>
> Am quite concerned about rollout & elsewhere discussion that an upcoming
> openssl update "breaks" proxies (512 vs 1024) or whatever.
>
> According to RHEL, it's on the way
> https://rhn.redhat.com/errata/RHSA-2014-0015.html
> This means it should be available for SL very soon.
>
> On rollout there's discussion of, well to fix the problem update cream
> with this package from epel or emi repos, blah blah. Our site has all
> those repos disabled to go along with the "WE STRONGLY RECOMMEND NOT TO
> USE AUTOMATIC UPDATE PROCEDURE OF ANY KIND" policy. But sl-security
> updates generally *are* automatically applied.
>
> So if this sl-security openssl upcoming update will break *anything*
> (bcs alas our site has very low support) the openssl update maybe
> should be blocked for now till a very very clear+easy path to fixing
> any fallout whatsoever, is documented.
>
> And I think that block should be done real soon like today.
>
> Advice most welcome!
>
> Winnie Lacesso / 55% HPC Storage Admin, 20% Particle Physics, 25% SysOps
> HH Wills Physics Laboratory, Tyndall Avenue, Bristol, BS8 1TL, UK
> University of Bristol
--
Sent from the pit of despair
-----------------------------------------------------------
[log in to unmask]
HEP Group/Physics Dep
Imperial College
London, SW7 2BW
Tel: +44-(0)20-75947810
http://www.hep.ph.ic.ac.uk/~dbauer/
|