openssh unix dev - Mar 2002 - [Bug 141] openssh-3.1p1-1.src.rpm will not build on RedHat Linux 6.1

http://bugzilla.mindrot.org/show_bug.cgi?id=141

markus at openbsd.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary| openssh-3.1p1-1.src.rpm    |openssh-3.1p1-1.src.rpm will
                   |will not build on RedHat    |not build on RedHat Linux
                   |Linux 6.1                   |6.1



------- Additional Comments From markus at openbsd.org  2002-03-08 06:50 -------
  http://bugzilla.mindrot.org/showattachment.cgi?attach_id=32

does this help?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From gleblanc at linuxweasel.com  2002-03-08 07:58
-------
This seems to fix it on my Red Hat Linux 6.2 based system (openssl-0.9.5a)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From wayne at qconcepts.net  2002-03-08 08:34
-------
This allows the rpm to compile and install; however, sshd is unusable after the 
install. I get the following errors (from ssh -v):

OpenSSH_3.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090602f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 500 geteuid 0 anon 1
debug1: Connecting to foo [x.x.x.x] port 22.
debug1: temporarily_use_uid: 500/500 (e=0)
debug1: restore_uid
debug1: temporarily_use_uid: 500/500 (e=0)
debug1: restore_uid
debug1: Connection established.
debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /home/wearl/.ssh/identity type 0
debug1: identity file /home/wearl/.ssh/id_rsa type -1
debug1: identity file /home/wearl/.ssh/id_dsa type -1
debug1: Remote protocol version 1.5, remote software version OpenSSH_3.1p1
debug1: match: OpenSSH_3.1p1 pat OpenSSH*
debug1: Local version string SSH-1.5-OpenSSH_3.1p1
debug1: Waiting for server public key.
debug1: Received server public key (768 bits) and host key (1024 bits).
debug1: Host 'foo' is known and matches the RSA1 host key.
debug1: Found key in /home/foo/.ssh/known_hosts:6
debug1: Encryption type: 3des
debug1: Sent encrypted session key.
debug1: cipher_init: set keylen (16 -> 32)
debug1: cipher_init: set keylen (16 -> 32)
debug1: Installing crc compensation attack detector.
Disconnecting: Corrupted check bytes on input.
debug1: Calling cleanup 0x8063550(0x0)

I cannot now ssh out of or into this machine.

When cipher.c compiles, it still gives the following warnings:

i386-redhat-linux-gcc -O2 -march=i386 -mcpu=i686 -Wall -Wpointer-arith -Wno-
uninitialized -I. -I.  -DSSHDIR=\"/etc/ssh\" -
D_PATH_SSH_PROGRAM=\"/usr/bin/ssh\" -
D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/libexec/openssh/ssh-askpass\" -
D_PATH_SFTP_SERVER=\"/usr/libexec/openssh/sftp-server\" -
D_PATH_SSH_PIDDIR=\"/var/run\"
-DSSH_RAND_HELPER=\"/usr/libexec/openssh/ssh-
rand-helper\" -DHAVE_CONFIG_H -c cipher.c
cipher.c: In function `cipher_init':
cipher.c:177: warning: unused variable `klen'
cipher.c: In function `ssh1_3des_init':
cipher.c:268: warning: assignment from incompatible pointer type
cipher.c: In function `ssh1_3des_cbc':
cipher.c:297: warning: assignment from incompatible pointer type
cipher.c: In function `ssh1_3des_cleanup':
cipher.c:311: warning: assignment from incompatible pointer type
cipher.c: In function `evp_ssh1_3des':
cipher.c:328: warning: assignment from incompatible pointer type
cipher.c:329: warning: assignment from incompatible pointer type
cipher.c:330: warning: assignment from incompatible pointer type
cipher.c: In function `evp_ssh1_bf':
cipher.c:373: warning: assignment from incompatible pointer type
cipher.c:375: warning: assignment from incompatible pointer type
cipher.c: In function `ssh_rijndael_init':
cipher.c:394: warning: assignment from incompatible pointer type
cipher.c: In function `ssh_rijndael_cbc':
cipher.c:421: warning: assignment from incompatible pointer type
cipher.c: In function `ssh_rijndael_cleanup':
cipher.c:458: warning: assignment from incompatible pointer type
cipher.c: In function `evp_rijndael':
cipher.c:475: warning: assignment from incompatible pointer type
cipher.c:476: warning: assignment from incompatible pointer type
cipher.c:477: warning: assignment from incompatible pointer type



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From mandar at webchat.chatsystems.com  2002-03-08
09:21 -------
I had the same compile issues under AIX 4.3.3. However, the patch resolved 
this, and I have no subsequent problems running sshd...just a heads up.

- Mandar




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From dgp at nist.gov  2002-03-08 11:25 -------
It appears to me that the claim in the INSTALL file that
OpenSSH 3.1p1 requires only OpenSSL 0.9.5a or greater is 
FALSE.

As reported in the original description, the cipher.c file
of OpenSSH 3.1p1 will not compile against OpenSSL 0.9.5a
headers.  The "flags" field was not added to the EVP_CIPHER
struct until release 0.9.6.

After upgrading my OpenSSL installation to 0.9.6c, things
were fine.

The INSTALL file of OpenSSH should be updated to reflect
the dependence on OpenSSL 0.9.6.

Additional checks in the ./configure would be a good idea too.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From jason at rndpkt.org  2002-03-08 11:37 -------
Created an attachment (id=34)
Patches openssh.spc in contrib/redhat to check for correct OpenSSL




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From jason at rndpkt.org  2002-03-08 11:39 -------
  OpenSSH 3.1 required OpenSSL >= 0.9.6.  See bugs 138 & 139 as to the
updated
documentation.  I've attached a patch to fix contrib/redhat/openssh.spec to
make
the RPM dependencies correct.  Not sure this covers all the issues here, but I
think it does.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From gleblanc at linuxweasel.com  2002-03-09 05:26
-------
I tested that I could ssh into and out of a machine running ssh with the patch
from Markus, and it worked fine.  Is anyone aware of other places where OpenSSH
requires OpenSSL 0.9.6?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141

wayne at qconcepts.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED



------- Additional Comments From wayne at qconcepts.net  2002-03-09 06:24
-------
When building with OpenSSL 0.9.6, openssh-3.1p1-1.src.rpm builds and installs 
correctly, even without Markus' patch. 

FYI: There is no OpenSSL 0.9.6 package for RedHat 6.1 - 0.9.5a is the last 
released. One can build the library from the 7.x srpm, and install with the --
nodeps option to rpm(OpenSSH 3.0 depends on 0.9.5a, but works fine with 0.9.6). 
Of course, this is not directly an OpenSSH issue, but may be of use to RedHat 
Linux users.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From cajoline at chaosengine.de  2002-03-09 14:43
-------
I have verified this problem. I built rpms from the openssh-3.1p1-2 redhat 
srpm (modified spec) and installed it on the same system, RHL 6.2 i386, 2.2.19-
6.2.12 errata kernel, with openssl-0.9.5a-7.6.x installed.
However, in my experience, the problem only occurs if AES-256 or AES-192 
ciphers are used; ssh and sshd both work fine as long as they are not forced 
to use these two ciphers.
This is just fyi, installing openssl 0.9.6 solves the problem, as noted in the 
last comment.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From markus at openbsd.org  2002-03-09 20:28 -------
Created an attachment (id=35)
this should make AES > 128 work (and 3des in ssh1)




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From markus at openbsd.org  2002-03-11 06:17 -------
Created an attachment (id=36)
another revision of the cipher.c patch




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=141





------- Additional Comments From markus at openbsd.org  2002-03-11 06:22 -------
Created an attachment (id=37)
this should work....




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.