openssh unix dev - Aug 2002 - OpenSSH 34p1 for AIX error. Please help

I'm trying to install open-ssh 34p1 on an Aix server, running 4.3.3..
I compiled openssh 0.9.6d and zlib 1.1.4.  on the server , and also created
the a bff pancake using the contrib/aix/buildbff.sh script.
I can't start sshd either installing it as a package or without.

When I tried to start sshd I received the following error:
0509-036 Cannot load program /.sshd because of the following errors:
0509-150 Dependent module /usr/local/lib/libcrypto.a/libcrypto.so) could not
be loaded.
 0509-152 Member libcrypto.so is not found in archive

I copied  libcrypto.a, created from compiling  openssl 0.9.6d from
/usr/local/ssl/lib to /usr/local/lib and still had the same error.
Can't find a libcrypto.so anyware on other aix servers. 
I would like to upgrade all aix servers using the package  instead of having
to compile  on each server. 

I have been installing OpenSSH 34p1 on all my solaris servers  via  the
package with no problem.
Not that familiar with AIX.  Some older version of openssh  work on these
servers. 

Does anyone know  how I can solve my problem ?
Also, does the aix package create an /etc/rc startup script for OpenSSH ?

Thanks


Confidentiality Notice: This e-mail message, including any attachments, is for
the sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or distribution
is prohibited. If you are not the intended recipient, please contact the sender
by reply e-mail and destroy all copies of the original message.

Hi,

On Wed, Aug 07, 2002 at 10:50:59AM -0700, Wiese, Maria
wrote:
> I'm trying to install open-ssh 34p1 on an Aix server, running 4.3.3..
> I compiled openssh 0.9.6d and zlib 1.1.4.  on the server , and also created
> the a bff pancake using the contrib/aix/buildbff.sh script.
> I can't start sshd either installing it as a package or without.
> 
> When I tried to start sshd I received the following error:
> 0509-036 Cannot load program /.sshd because of the following errors:
> 0509-150 Dependent module /usr/local/lib/libcrypto.a/libcrypto.so) could
not
> be loaded.
>  0509-152 Member libcrypto.so is not found in archive
This sounds very much like you compiled OpenSSL as shared library (which
is not recommended) or there was already a shlib-OpenSSL on your system,
which is now lacking on the target system.

I have no problems copying ssh/sshd binaries between AIX 4.2 and 4.3
machines (not using bff, but customer-customized tar archives), but I 
take care to be sure I link the statically-compiled openssh libraries.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at
greenie.muc.de
fax: +49-89-35655025                        gert.doering at
physik.tu-muenchen.de

"Wiese, Maria" wrote:
> I'm trying to install open-ssh 34p1 on an Aix server, running 4.3.3..
> I compiled openssh 0.9.6d and zlib 1.1.4.  on the server , and also created
> the a bff pancake using the contrib/aix/buildbff.sh script.
> I can't start sshd either installing it as a package or without.
There's a potential vulnerability in openssl <= 0.9.6d. You might like
to upgrade to 0.9.6e.
> When I tried to start sshd I received the following error:
> 0509-036 Cannot load program /.sshd because of the following errors:
> 0509-150 Dependent module /usr/local/lib/libcrypto.a/libcrypto.so) could
not
> be loaded.
>  0509-152 Member libcrypto.so is not found in archive
As Gert said earlier, maybe OpenSSL was compiled as a shared library, or
possibly some other compile problem. What configure options did you use
to build openssl and openssh?
> Can't find a libcrypto.so anyware on other aix servers.
> I would like to upgrade all aix servers using the package instead of having
> to compile on each server.
Me too. I have a single package built against static openssl and zlib
libraries that works from AIX 4.2.0 up to 4.3.3. (I don't have 5). The
only gotcha is you need to compile on the oldest platform (including
maintenance levels) that you plan to support.
> Also, does the aix package create an /etc/rc startup script for OpenSSH ?
Approximately yes. It appends to /etc/rc.tcpip if sshd isn't already in
.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG Fingerprint D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.