View Single Post
Posts: 567 | Thanked: 2,966 times | Joined on Oct 2009
#1
This thread is going to document all the software on a stock N900 root filesystem (what you get if you unpack the FIASCO image and then mount the UBIFS, i.e. no optification or anything else done to the system) that talks to openssl.
Firstly I will list all the binaries that link to openssl along with the packages they belong to and whether those packages are open or closed.

Then I will list (for each closed binary) which openssl functions it appears to be calling/talking to.

The intent is to provide the information necessary to allow a newer OpenSSL version (e.g. OpenSSL 1.0.2 or LibreSSL) to be installed via CSSU as well as some clues as to the likely security risks caused by the remaining talks-to-openssl closed binaries (that risk is determined by a combination of which openssl functions they use and where, if anywhere, they are talking to in the outside world)

List of binaries using openssl and which packages they are in:
as-daemon (as-daemon-0, closed source)
b64 (maemosec-certman-tools, open source)
browser.launch (tablet-browser-ui, closed source)
cmcli (maemosec-certman-tools, open source)
eapd (osso-wlan-security, closed source)
intellisyncd (nokiamessaging, closed source and obsolete)
libclinkc.so.0.0.0 (clinkc0, open source)
libconnui_iapsettings.so.0.0.0 (connui-iapsettings, closed source)
libcurl.so.4.1.0 (libcurl3, open source)
libflashplayer.so (adobe-flashplayer, closed source)
libiap_dialog_gtc_challenge.so (connui-conndlgs-wlan, open source)
libiap_dialog_mschap_change.so (connui-conndlgs-wlan, closed source)
libiap_dialog_private_key_pw.so (connui-conndlgs-wlan, open source)
libiap_dialog_server_cert.so (connui-conndlgs-wlan, open source)
libiap_dialog_wps.so (connui-conndlgs-wlan, closed source)
libiap_wizard_wlan.so (connui-iapsettings-wlan, closed source)
libinternetsettings.so (connui-iapsettings, closed source)
liblomesa.so.0.0.0 (liblomesa0, closed source)
libloudmouth-1.so.0.1.0 (libloudmouth1-0, open source)
libmaemosec.so.0.0.0 (libmaemosec0, open source)
libmaemosec_certman.so.0.0.0 (libmaemosec-certman0, open source)
libmaemosec_certman_applet.so (maemosec-certman-applet, open source)
libmaemosec_certman_dialogs.so.0.0.0 (maemosec-certman-applet, open source)
libmicrob-eal.so.0.0.0 (microb-eal, open source)
libQtNetwork.so.4.7.0 (libqt4-network, open source)
libshareonovi.so (sharing-service-ovi, closed source and obsolete)
libsofia-sip-ua-glib.so.3.0.0 (libsofia-sip-ua-glib3, open source)
libsofia-sip-ua.so.0.6.0 (libsofia-sip-ua0, open source)
libsync4j.so.3.0.0 (funambol-cpp-api, closed source)
location-proxy (location-proxy, closed source)
maemosec_certman_service (maemosec-certman-applet, open source)
nsscfg (maemosec-certman-tools, open source)
osso-backup.launch (osso-backup, closed source)
ota-settings (ota-settings, closed source)
signond (signond0, closed source)
sscli (maemosec-certman-tools, open source)
syncd (maesync-backend, closed source)
xmlpp (maemosec-certman-tools, open source)
Xorg (xserver-xorg-core, open source)
 

The Following 14 Users Say Thank You to jonwil For This Useful Post: