[clamav-users] Introducing OpenSSL as a dependency to ClamAV

[Shawn Webb]

On Thu, Feb 27, 2014 at 5:56 PM, Lawrence K. Chen, P.Eng. <lkchen at ksu.edu>wrote:

>
>
> On 02/27/14 02:34, Steve Basford wrote:
> >
> >
> >> OpenSSL will be required to both compile and run ClamAV.
> >
> > Out of interest what Cipher:
> >
> > http://zombe.es/post/4078724716/openssl-cipher-selection
> >
> >
> http://security.stackexchange.com/questions/35036/different-performance-of-openssl-speed-on-the-same-hardware-with-aes-256-evp-an
> >
> > Cheers,
> >
> > Steve
> > Sanesecurity
> >
>
> So, will it build/run with openssl 0.9.8* or require openssl 1.0.*
>
> We only have openssl 0.9.8* in our environment (with some ancient boxes
> using 0.9.7*)
>
> Currently, the latest available is 0.9.8y, since I have DNS only VMs
> where I don't have to worry about the newer version causing problems for
> other automated (through CFEngine) sun package installs.
>
> And, my clamav instances are also dedicated VMs (well, semi...but
> hopefully there won't be a problem with having older 0.9.8 openssl
> 32-bit libraries with the latest 0.9.8 64-bit libraries :)


Great question. I will have a solid answer for you tomorrow.

Thanks,

Shawn