Re: DROWN attacks vs openssl
Posted by
hans2 on
Mar 04, 2016; 10:07pm
URL: https://itus.accessinnov.com/DROWN-attacks-vs-openssl-tp255p289.html
Roadrunnere42 wrote
I removed the file as you said and ran the following
opkg install --force-reinstall ./openssl-util_1.0.2g-1_octeon.ipk
No packages removed.
Installing openssl-util (1.0.2g-1) to root...
Collected errors:
* check_data_file_clashes: Package openssl-util wants to install file /usr/bin/openssl
But that file is already provided by package * ohns
* opkg_install_cmd: Cannot install package openssl-util.
I then ran
opkg info openssl-util
Package: openssl-util
Version: 1.0.2g-1
Depends: libc, libopenssl
Status: install prefer,user not-installed
Architecture: octeon
Conffiles:
/etc/ssl/openssl.cnf 06baa8f15992bacd3e5b113cd571d828c0
so am i running 1.02g-1 already
roadrunnere42
This is what I got on a 1.51SP1 clean (!) router-mode shield:
root@Shield:/# cat /etc/opkg.conf
dest root /
dest ram /tmp
lists_dir ext /var/opkg-lists
option overlay_root /overlay
src/gz chaos_calmer_base http://downloads.openwrt.org/chaos_calmer/15.05-rc3/octeon/generic/packages/base
src/gz chaos_calmer_luci http://downloads.openwrt.org/chaos_calmer/15.05-rc3/octeon/generic/packages/luci
src/gz chaos_calmer_management http://downloads.openwrt.org/chaos_calmer/15.05-rc3/octeon/generic/packages/management
src/gz chaos_calmer_packages http://downloads.openwrt.org/chaos_calmer/15.05-rc3/octeon/generic/packages/packages
src/gz chaos_calmer_routing http://downloads.openwrt.org/chaos_calmer/15.05-rc3/octeon/generic/packages/routing
src/gz chaos_calmer_telephony http://downloads.openwrt.org/chaos_calmer/15.05-rc3/octeon/generic/packages/telephony
# src/gz chaos_calmer_targets http://downloads.openwrt.org/chaos_calmer/15.05-rc3/octeon/generic/packages/targets
#option check_signature 1
arch cn70xx 100
arch octeon 200
arch all 300
root@Shield:/# openssl version
OpenSSL 1.0.2d 9 Jul 2015
root@Shield:/# curl -k https://downloads.openwrt.org/chaos_calmer/15.05/octeon/generic/packages/base/openssl-util_1.0.2g-1_octeon.ipk -o openssl-util_1.0.2g-1_octeon.ipk
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 188k 100 188k 0 0 119k 0 0:00:01 0:00:01 --:--:-- 120k
root@Shield:/# ls -al
drwxr-xr-x 17 root root 4096 Nov 26 03:01 .
drwxr-xr-x 17 root root 4096 Nov 26 03:01 ..
drwxr-xr-x 2 root root 4096 Nov 26 03:01 bin
drwxr-xr-x 5 root root 11280 Nov 26 03:00 dev
drwxrwxr-x 26 root root 4096 Nov 26 03:01 etc
drwxr-xr-x 3 root root 4096 Nov 26 03:01 include
-rwxrwxr-x 1 root root 1647 May 4 2015 init
drwxr-xr-x 12 root root 4096 Nov 10 05:39 lib
lrwxrwxrwx 1 root root 3 Nov 26 03:01 lib64 -> lib
drwx------ 2 root root 16384 Nov 26 03:01 lost+found
drwxr-xr-x 2 root root 4096 May 4 2015 mnt
-rw-r--r-- 1 root root 193192 Nov 26 03:01 openssl-util_1.0.2g-1_octeon.ipk
dr-xr-xr-x 73 root root 0 Jan 1 1970 proc
drwxrwxr-x 2 root root 4096 Nov 26 03:01 rom
drwxr-xr-x 2 root root 4096 May 4 2015 root
drwxr-xr-x 2 root root 4096 Nov 26 03:01 sbin
dr-xr-xr-x 11 root root 0 Jan 1 1970 sys
drwxrwxrwt 18 root root 480 Nov 26 03:01 tmp
drwxr-xr-x 8 root root 4096 Aug 20 03:18 usr
lrwxrwxrwx 1 root root 4 Nov 26 03:01 var -> /tmp
drwxrwxr-x 6 root root 4096 Nov 26 03:01 www
root@Shield:/# opkg install ./openssl-util_1.0.2g-1_octeon.ipk
root@Shield:/# openssl version
OpenSSL 1.0.2d 9 Jul 2015
root@Shield:/# env
SHLVL=2
OLDPWD=/overlay
HOME=/root
PS1=\u@\h:\w\$
TERM=linux
serial#=my_sandbox
PATH=/usr/bin:/usr/sbin:/bin:/sbin
numcores=2
PWD=/
root@Shield:/# env
root@Shield:/# opkg install ./openssl-util_1.0.2g-1_octeon.ipk
Upgrading openssl-util on root from 1.0.2a-0 to 1.0.2g-1...
Configuring openssl-util.
root@Shield:/# openssl version
/bin/ash: openssl: not found
root@Shield:/# opkg install --force-reinstall ./openssl-util_1.0.2g-1_octeon.ipk
No packages removed.
Installing openssl-util (1.0.2g-1) to root...
Collected errors:
* check_data_file_clashes: Package openssl-util wants to install file /usr/bin/openssl
But that file is already provided by package * o_Velho
* opkg_install_cmd: Cannot install package openssl-util.
root@Shield:/# openssl version
/bin/ash: openssl: not found
No more: Shield Pro v1, Chaos Calmer, FW 1.51 SP1