[Bug 1991] openssl version checking needs updating

bugzilla-daemon at bugzilla.mindrot.org
Fri, 30 Mar 2012 00:18:19 -0000

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2137|0                           |1
        is obsolete|                            |
             Status|NEW                         |ASSIGNED
         AssignedTo|unassigned-bugs at mindrot.org |djm at mindrot.org
   Attachment #2139|                            |ok?(dtucker at zip.com.au)
              Flags|                            |

--- Comment #4 from Damien Miller <djm at mindrot.org> 2012-03-30 11:18:19
EST ---
Created attachment 2139
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2139
Improved test

This check is a little more strict:

It matches the patch version (so 1.2.0 will not work with an OpenSSH
built against 1.0.1). This is a bit more paranoid than the original
patch, but looser than what we have at present.

It also checks disables the laxity if the build or runtime versions are
not official releases. My rationale here is that binary compatibility
might be broken in unreleased versions.