Stories
Slash Boxes
Comments
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

use Perl Log In

Log In

[ Create a new account ]

autarch (914)

autarch
  (email not shown publicly)
http://www.vegguide.org/

Journal of autarch (914)

Sunday June 20, 2004
12:58 AM

Damn you, FreeBSD, and damn me too

[ #19383 ]

So I'm upgrading some code on a client's site, and I notice via portaudit that the currently installed apache/mod_ssl has some security holes. Time to upgrade.

I do the upgrade and it overwrites the server.crt and server.key files!

Good job, FreeBSD. Remember, any files you find on the system can't be too important.

On a side note, I did not choose FreeBSD, and so far I completely hate it. I will point out that Debian never overwrites an existing file without asking you first. That's cause Debian doesn't suck hairy monkey nuts.

Of course, I'm an idiot too, because it turns out I didn't have a backup of the private key for the cert, so I had to buy a new one. Thankfully, freessl.com made this pretty easy and cheap.

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login | Reply
Loading... please wait.
  • On a side note, I did not choose FreeBSD, and so far I completely hate it.

    You may think that FreeBSD sucks, and you may hate it, but the two are not totally unrelated.

    Many moons ago, I was the raving Unix bigot in a Windows shop. A half dozen of the programmers were switching to IBM's newly-released OS/2 Warp, and they were loving it: memory protection, multiple DOS sessions, Windows emulation, the works.

    I decided to give it a try, and boy did it suck. It was annoyingly slower than Windows for th

  • Did you install from the ports source or a package downloaded from freebsd.org?

    Also, put your anger to good use and fire off a complaint to the maintainer of the apache/mod_ssl port.
     
    • I installed from ports. I kind of assume that's how you're supposed to do it.

      I don't suppose there's a nice bug reporting script like reportbug for Debian, is there?