openssh bugs - Sep 2003 - [Bug 685] cipher.c error when building against OpenSSL 0.9.7b on RedHat 7.3

http://bugzilla.mindrot.org/show_bug.cgi?id=685

           Summary: cipher.c error when building against OpenSSL 0.9.7b on
                    RedHat 7.3
           Product: Portable OpenSSH
           Version: 3.7.1p1
          Platform: ix86
        OS/Version: Linux
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Build system
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: dean at mrdltd.ca


I'm getting the following error when trying to compile 3.7.1p1 source on a 
RedHat 7.3 box with OpenSSL 0.9.7b. On the same machine with OpenSSL 0.9.6h 
installed, it compiles fine...

./configure --prefix=/usr --sysconfdir=/etc/ssh --with-privsep-user=sshd

...

OpenSSH has been configured with the following options:
                     User binaries: /usr/bin
                   System binaries: /usr/sbin
               Configuration files: /etc/ssh
                   Askpass program: /usr/libexec/ssh-askpass
                      Manual pages: /usr/man/manX
                          PID file: /var/run
  Privilege separation chroot path: /var/empty
            sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin
                    Manpage format: doc
                       DNS support: no
                       PAM support: no
                 KerberosV support: no
                 Smartcard support: no
                     S/KEY support: no
              TCP Wrappers support: no
              MD5 password support: no
       IP address in $DISPLAY hack: no
           Translate v4 in v6 hack: yes
                  BSD Auth support: no
              Random number source: OpenSSL internal ONLY

              Host: i686-pc-linux-gnu
          Compiler: gcc
    Compiler flags: -g -O2 -Wall -Wpointer-arith -Wno-uninitialized
Preprocessor flags:
      Linker flags:
         Libraries:   -lutil -lz -lnsl  -lcrypto -lcrypt

make

...

gcc -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I. -I.  -
DSSHDIR=\"/etc/ssh\" -D_PATH_SSH_PROGRAM=\"/usr/bin/ssh\" -
D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/libexec/ssh-askpass\" -
D_PATH_SFTP_SERVER=\"/usr/libexec/sftp-server\" -
D_PATH_SSH_KEY_SIGN=\"/usr/libexec/ssh-keysign\" -
D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -
DSSH_RAND_HELPER=\"/usr/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c
cipher.c
cipher.c:68: warning: initialization from incompatible pointer type
cipher.c:69: warning: initialization from incompatible pointer type
cipher.c:73: warning: initialization from incompatible pointer type
cipher.c:74: warning: initialization from incompatible pointer type
cipher.c:75: warning: initialization from incompatible pointer type
cipher.c:76: warning: initialization from incompatible pointer type
cipher.c:84: error: `EVP_aes_128_cbc' undeclared here (not in a function)
cipher.c:84: error: initializer element is not constant
cipher.c:84: error: (near initialization for `ciphers[8].evptype')
cipher.c:84: error: initializer element is not constant
cipher.c:84: error: (near initialization for `ciphers[8]')
cipher.c:85: error: `EVP_aes_192_cbc' undeclared here (not in a function)
cipher.c:85: error: initializer element is not constant
cipher.c:85: error: (near initialization for `ciphers[9].evptype')
cipher.c:85: error: initializer element is not constant
cipher.c:85: error: (near initialization for `ciphers[9]')
cipher.c:86: error: `EVP_aes_256_cbc' undeclared here (not in a function)
cipher.c:86: error: initializer element is not constant
cipher.c:86: error: (near initialization for `ciphers[10].evptype')
cipher.c:86: error: initializer element is not constant
cipher.c:86: error: (near initialization for `ciphers[10]')
cipher.c:88: error: `EVP_aes_256_cbc' undeclared here (not in a function)
cipher.c:88: error: initializer element is not constant
cipher.c:88: error: (near initialization for `ciphers[11].evptype')
cipher.c:88: error: initializer element is not constant
cipher.c:88: error: (near initialization for `ciphers[11]')
cipher.c:90: error: initializer element is not constant
cipher.c:90: error: (near initialization for `ciphers[12]')
cipher.c:91: error: initializer element is not constant
cipher.c:91: error: (near initialization for `ciphers[13]')
cipher.c:92: error: initializer element is not constant
cipher.c:92: error: (near initialization for `ciphers[14]')
cipher.c:94: error: initializer element is not constant
cipher.c:94: error: (near initialization for `ciphers[15]')
cipher.c: In function `cipher_get_keycontext':
cipher.c:403: warning: comparison of distinct pointer types lacks a cast
cipher.c:407: error: structure has no member named `cipher_data'
cipher.c: In function `cipher_set_keycontext':
cipher.c:418: warning: comparison of distinct pointer types lacks a cast
cipher.c:420: error: structure has no member named `cipher_data'
make: *** [cipher.o] Error 1



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=685





------- Additional Comments From dtucker at zip.com.au  2003-09-19 11:54 -------
Please check configure's output to see which OpenSSL version it's
finding.  I
think you're picking up an OpenSSL version from the system headers, in which
case you need to use:
$ ./configure --with-ssl-dir=/usr/local/ssl
(or wherever your OpenSSL is installed).

Maybe the "OpenSSH has been configured with the following options"
output should
include OpenSSL version?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=685





------- Additional Comments From jason at devrandom.org  2003-09-22 10:57
-------
Created an attachment (id=442)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=442&action=view)
Quickie patch to report OpenSSL header version.

Adds the following line to the 'configure' out put:

	    OpenSSL Header Version: 9060af (OpenSSL 0.9.6j 10 Apr 2003)




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=685





------- Additional Comments From jason at devrandom.org  2003-09-22 11:00
-------
Try patching your OpenSSH source tree with the patch on this bug.  It'll
report
the OpenSSL version that autoconf is finding during configuration.  See if what
autoconf is finding matches what you think it should be finding.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=685

dean at mrdltd.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED



------- Additional Comments From dean at mrdltd.ca  2003-09-22 12:22 -------
The configure script's output prior to the patch output the OpenSSL lib and 
header versions, and since it reported 0.9.7b I thought nothing of it, but 
prior to applying the patch I found the older libs and headers located in 
the /usr (/lib & /include) directory. Upon replacing them with the 0.9.7b
ones
OpenSSH compiles fine, so I have not had a chance or a need for the patch, but 
it seems as though the configure script reports one version of libs/headers but 
uses another, even when using the --with-ssl-dir=/usr/local/ssl directive. I 
consider this resolved, and 90% my machine's problem, but it seems strange
that
the two different versions were never reported by the configure script at all, 
although and it sounds like the patch might address this issue.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=685





------- Additional Comments From dtucker at zip.com.au  2003-09-22 13:14 -------
There was a bug with some versions of gcc where "-I" header search
paths got
appended not prepended to the search list.  Details escape me at the moment but
it's probably in gcc's bugzilla somewhere.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=685

jason at devrandom.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |



------- Additional Comments From jason at devrandom.org  2003-09-22 21:00
-------
Is the patch here appropriate for inclusion in configure.ac to print the OpenSSL
version in summary report?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.