diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 4b2574bb48..865be4aa0d 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -1456,7 +1456,7 @@ $ dnssec-signzone -S -K keys example.net<

Note

The latest OpenSSL version at the time of the BIND release - is 0.9.8l. + is 0.9.8s. ISC will provide an updated patch as new versions of OpenSSL are released. The version number in the following examples is expected to change.
@@ -1465,18 +1465,18 @@ $ dnssec-signzone -S -K keys example.net< necessary to build OpenSSL with this patch in place and inform it of the path to the HSM-specific PKCS #11 provider library.

-

Obtain OpenSSL 0.9.8l:

+

Obtain OpenSSL 0.9.8s:

-$ wget http://www.openssl.org/source/openssl-0.9.8l.tar.gz
+$ wget http://www.openssl.org/source/openssl-0.9.8s.tar.gz

Extract the tarball:

-$ tar zxf openssl-0.9.8l.tar.gz
+$ tar zxf openssl-0.9.8s.tar.gz

Apply the patch from the BIND 9 release:

-$ patch -p1 -d openssl-0.9.8l \
-            < bind-9.7.0/bin/pkcs11/openssl-0.9.8l-patch
+$ patch -p1 -d openssl-0.9.8s \
+            < bind-9.7.0/bin/pkcs11/openssl-0.9.8s-patch

Note

(Note that the patch file may not be compatible with the @@ -1508,7 +1508,7 @@ $ cp pkcs11.GCC4.0.2.so.4.05 /opt/pkcs11/usr/lib

Finally, the Keyper library requires threads, so we must specify -pthread.

-$ cd openssl-0.9.8l
+$ cd openssl-0.9.8s
 $ ./Configure linux-generic32 -m32 -pthread \
             --pk11-libname=/opt/pkcs11/usr/lib/libpkcs11.so \
             --pk11-flavor=sign-only \
@@ -1529,7 +1529,7 @@ $ ./Configure linux-generic32 -m32 -pthread \
 
In this example, we are building on Solaris x86 on an
       AMD64 system.

 
-$ cd openssl-0.9.8l
+$ cd openssl-0.9.8s
 $ ./Configure solaris64-x86_64-cc \
             --pk11-libname=/usr/lib/64/libpkcs11.so \
             --pk11-flavor=crypto-accelerator \