Hello, I have tried to install openssh 2.9p2 on Solaris 2.6 and Solaris 2.8 after compiling the openssl (both 0.9.6a and 0.9.6b) and openssh software with both gcc 2.95.3, Sun's Forte compiler, Sun's linker, etc. I have tried the zlib from Sun freeware and version 11.8.0 REV=2000.01.08.18.12 contained in the SUNWzlib package. Both openssh and openssl appear to make properly and all the tests for openssl pass. When I do a make install for openssh it fails to generate public/private dsa keys..in fact ssh_keygen has a bus error when trying to do DSA operations. I know other people have had this problem, because I've seen similar messages in the mailing list. Unfortunately it appears that noone has a solution...at least I can't find an answer. What I am wondering is if anyone can get openssh to work on Solaris with the 0.9.6x openssl libraries. Maybe I'm missing someone, but everything seems to work fine with the 0.9.5x openssl libraries. It appears to me that something broke after the 0.9.5x libraries. I'm not sure if openssl is the problem. If this problem has been resolved then please enlighten me, otherwise I can provide more details to help resolve this issue. Thanks, Scott
On Tue, Jul 24, 2001 at 09:29:44AM -0500, Scott Burch wrote:> I have tried to install openssh 2.9p2 on Solaris 2.6 and Solaris 2.8 > after compiling the openssl (both 0.9.6a and 0.9.6b) and openssh > software with both gcc 2.95.3, Sun's Forte compiler, Sun's linker, etc. > I have tried the zlib from Sun freeware and version 11.8.0 > REV=2000.01.08.18.12 contained in the SUNWzlib package. Both openssh and > openssl appear to make properly and all the tests for openssl pass. When > I do a make install for openssh it fails to generate public/private dsa > keys..in fact ssh_keygen has a bus error when trying to do DSA > operations. I know other people have had this problem, because I've seen > similar messages in the mailing list. Unfortunately it appears that > noone has a solution...at least I can't find an answer. What I am > wondering is if anyone can get openssh to work on Solaris with the > 0.9.6x openssl libraries. Maybe I'm missing someone, but everything > seems to work fine with the 0.9.5x openssl libraries. It appears to me > that something broke after the 0.9.5x libraries. I'm not sure if openssl > is the problem. If this problem has been resolved then please enlighten > me, otherwise I can provide more details to help resolve this issue.There is a more or less simple answer to this problem. Somebody who can reproduce this problem must recompile OpenSSH and OpenSSL with debugger support and analyze the core dump, to see where the problem is coming from. Of course I assume, that the header files used for the compilation matches the library versions of the openssl libraries actually linked in. Best regards, Lutz -- Lutz Jaenicke Lutz.Jaenicke at aet.TU-Cottbus.DE BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
On Tue, Jul 24, 2001 at 09:29:44AM -0500, Scott Burch wrote:> Hello, > > I have tried to install openssh 2.9p2 on Solaris 2.6 and Solaris 2.8 > after compiling the openssl (both 0.9.6a and 0.9.6b) and openssh > software with both gcc 2.95.3, Sun's Forte compiler, Sun's linker, etc. > I have tried the zlib from Sun freeware and version 11.8.0 > REV=2000.01.08.18.12 contained in the SUNWzlib package. Both openssh and > openssl appear to make properly and all the tests for openssl pass. When > I do a make install for openssh it fails to generate public/private dsa > keys..in fact ssh_keygen has a bus error when trying to do DSA > operations. I know other people have had this problem, because I've seen > similar messages in the mailing list. Unfortunately it appears that > noone has a solution...at least I can't find an answer. What I am > wondering is if anyone can get openssh to work on Solaris with the > 0.9.6x openssl libraries. Maybe I'm missing someone, but everything > seems to work fine with the 0.9.5x openssl libraries. It appears to me > that something broke after the 0.9.5x libraries. I'm not sure if openssl > is the problem. If this problem has been resolved then please enlighten > me, otherwise I can provide more details to help resolve this issue.Not sure if it is helpful but it worked for me. Here are the tools/libraries that I used openssl 0.9.6 openssh 2.9p2 (configure --with-tcp-wrapper --without-pam) gcc 2.95.3 zlib 1.1.3 ANDIrand package from http://www.cosy.sbg.ac.at/~andi/ which provides /dev/random for solaris. The only difference is the 0.9.6 instead of 0.9.6a/b. I just did a quick build of 0.9.6b and ssh and it seems to work fine, but I didn't test it too much. Jim -- Jim Mintha Email: jim at ic.uva.nl System Administrator Work: +31 20 525-4919 Informatiseringscentrum Home: +31 20 662-3892 University of Amsterdam Debian GNU/Linux: jmintha at debian.org _There are always Possibilities_ http://jim.ultralinux.org
Scott Burch <somar at tiny.net> writes:> I do a make install for openssh it fails to generate public/private dsa > keys..in fact ssh_keygen has a bus error when trying to do DSA > operations. I know other people have had this problem, because I've seen > similar messages in the mailing list. Unfortunately it appears that > noone has a solution...I was one of those people, and I think I'm out of the woods... I think there was more than one (bad) thing going on, and I cannot explain all of them... Anyway, I'm cookin' with: sparc-solaris2.6 (reasonably well patched) openssl 0.9.6b (had problems with anything earlier) openssh 2.9p2 (I don't *think* the configure options matter) gcc 3.0 (not sure that this matters) zlib 1.1.3 The problem that was *killing* me was: I compile openssl (and everything else) in directories-other-than-the-source, using the olde fashioned "symlink farm" method. HOWEVER, openssl has a couple of strategically-placed symlinks itself, and if you do symlinks-to-those-symlinks, you *will* hose yourself. I therefore run the bit of code below in the directory where I plan to build, *just before* I run ./Configure. Hope this is of some use, Will ====================================================FIND=/usr/bin/find XARGS=/usr/bin/xargs # There are potentially several versions of .../opensslconf.h # floating about, and it is VERY important that we get rid of # any potentially bogus ones and end up with only the right ones. # So: make sure there are *none* in the original source, # the src linkfarm or here: $FIND ../openssl-* ../src . -name opensslconf.h -print | $XARGS /bin/rm -f # The include directory one is supposed to link to the # crypto/ dir one: $LN -s ../../crypto/opensslconf.h include/openssl/opensslconf.h # The default stuff writes new versions of these without /bin/rm'ing # them first; very naughty; so we help: $FIND ../openssl-* ../src -name Makefile.save -print | $XARGS /bin/rm -f /bin/rm -f Makefile.ssl
I have built the last many versions of OpenSSH, using zlib 1.1.3, and openssl 0.9.6, 0.9.6a, and 0.9.6b, using both Forte C and gcc 2.95.3, on SunOS 5.5.1, 5.6, 5.7, and 5.8. I've never seen this problem. I suggest you _don't_ use the downloaded packages off the net, but build everything yourself, all on the _same_ version of SunOS (e.g. don't run 5.6 binaries on 5.8). -- Carson Gaspar - carson at taltos.org Queen trapped in a butch body
We experienced similar problems -- strange enough it works on all our (approx. 60) machines (2.6, 2.7, 2.8) except but one single Ultra30 that refuses from generating the DSA stuff. Lukily for us, we could just declare this single machine to be a test machine... We made use of the CC provided by Sun but compiled everything ourselves. --lpr On Tue, 24 Jul 2001, Scott Burch wrote:> Hello, > > I have tried to install openssh 2.9p2 on Solaris 2.6 and Solaris 2.8 > after compiling the openssl (both 0.9.6a and 0.9.6b) and openssh > software with both gcc 2.95.3, Sun's Forte compiler, Sun's linker, etc. > I have tried the zlib from Sun freeware and version 11.8.0 > REV=2000.01.08.18.12 contained in the SUNWzlib package. Both openssh and > openssl appear to make properly and all the tests for openssl pass. When > I do a make install for openssh it fails to generate public/private dsa > keys..in fact ssh_keygen has a bus error when trying to do DSA > operations. I know other people have had this problem, because I've seen > similar messages in the mailing list. Unfortunately it appears that > noone has a solution...at least I can't find an answer. What I am > wondering is if anyone can get openssh to work on Solaris with the > 0.9.6x openssl libraries. Maybe I'm missing someone, but everything > seems to work fine with the 0.9.5x openssl libraries. It appears to me > that something broke after the 0.9.5x libraries. I'm not sure if openssl > is the problem. If this problem has been resolved then please enlighten > me, otherwise I can provide more details to help resolve this issue. > > Thanks, > Scott-- Lukas Ruf Swiss Federal Institute of Technology Office: ETZ-G61.2 Computer Engineering and Phone: +41/1/632 7312 Networks Laboratory (TIK) Fax: +41/1/632 1035 ETH Zentrum PGP 2.6: ID D20BA2ED; Gloriastr. 35 Fingerprint 6323 B9BC 9C8E 6563 B477 BADD FEA6 E6B7 CH-8092 Zurich