Hello,
it might be that you compiled and installed 64-bit openssl libraries, but
are doing a 32-bit openssh build.
In this case your 64-bit openssl libraries are 'not found' (although
they
are in correct place, and the '--with-ssl-dir' is correctly set), and
the
openssh Configure scripts falls back to the old/unwanted 32-bit openssl
libraries in /usr/sfw/lib
This worked for me (on SunOS 5.10 Generic_150401-22 i86pc i386 i86pc
Solaris, with gcc (GCC) 3.4.3 )
1. Configure for openssl
x at y:~/build/openssl-1.0.1s > ./Configure solaris-x86-gcc
--prefix=/some/path/openssl-1.0.1s
--openssldir=/some/path/openssl-1.0.1s/openssl shared
(solaris-x86-gcc configures for a 32-bit build. I had to use
'./Configure'
because './config' was throwing errors when solaris-x86-gcc was
specified)
make, make install, etc..
2. Configure for openssh-7.2p2:
x at y:~/build/openssh-7.2p2 >./configure --prefix /some/path/openssh-7.2p2
--with-ssl-dir=/some/path/openssl-1.0.1s --with-md5-passwords
--your-other-options ....
No other configuration was needed (LDFLAGS, LD_LIBRARY_PATH, CPPFLAGS,
etc..)
On Monday, 31 August 2015 17:12:21 UTC+2, Bernt Jernberg
wrote:>
> Hi,
>
> I am trying to build the 7.1p1 on Solaris 10 SPARC.
> I have build OpenSSL 1.0.1p and installed it in /opt/local/openssl.
> Configure options for that:
>
> export
> PATH=/opt/local/bin:/usr/sfw/bin:/usr/ccs/bin:/usr/bin:/usr/sbin:/sbin
> export MAKE=gmake
> ./Configure shared solaris64-sparcv9-gcc -R/usr/sfw/lib/sparcv9
> -R/opt/local/openssl/lib --prefix=/opt/local/openssl
> gmake test
> gmake install
>
> export
> PATH=/opt/local/bin:/usr/sfw/bin:/usr/ccs/bin:/usr/bin:/usr/sbin:/sbin
> ./configure --sysconfdir=/etc/opt/openssh \
> --prefix=/opt/local \
> --with-solaris-contracts \
> --with-tcp-wrappers=/usr/sfw/lib \
> --with-ssl-dir=/opt/local/openssl \
> --with-audit=bsm \
> --without-bsd-auth \
> --with-zlib=/usr/sfw/lib \
> --with-privsep-path=/var/opt/empty \
> --with-pam \
> --with-privsep-user=sshd \
> --with-default-path=/opt/local/bin:/usr/bin:/usr/sbin:/sbin \
>
>
--with-superuser-path=/opt/local/sbin:/opt/local/bin:/sbin:/usr/sbin:/usr/bin
>
> \
> --with-kerberos5=/opt/local
> CPPFLAGS='-I/opt/local/openssl/include'
LDFLAGS='-L/opt/local/openssl/lib'
>
> # crle
>
> Configuration file [version 4]: /var/ld/ld.config
> Default Library Path (ELF):
> /opt/local/openssl/lib:/lib:/usr/lib:/usr/ccs/lib:/usr/sfw/lib
> Trusted Directories (ELF): /lib/secure:/usr/lib/secure (system
> default)
>
> Command line:
> crle -c /var/ld/ld.config -l
> /opt/local/openssl/lib:/lib:/usr/lib:/usr/ccs/lib:/usr/sfw/lib
>
>
> I am using the default compiler:
>
> # /usr/sfw/bin/gcc --version
> gcc (GCC) 3.4.3 (csl-sol210-3_4-branch+sol_rpath)
> Copyright (C) 2004 Free Software Foundation, Inc.
> This is free software; see the source for copying conditions. There is NO
> warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
> PURPOSE.
>
> # uname -a
> SunOS myhost 5.10 Generic_142900-11 sun4u sparc SUNW,Sun-Fire-V215
>
> No matter what I do the configure fails with:
>
> checking OpenSSL header version... 1000110f (OpenSSL 1.0.1p 9 Jul 2015)
> checking OpenSSL library version... configure: error: OpenSSL >= 0.9.8f
> required (have "0090704f (OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes
> for:
> CVE-2005-2969 CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339
> CVE-2006-4343 CVE-2007-5135 CVE-2007-3108 CVE-2008-5077
CVE-2009-0590))")
>
> It always checks the one installed in /usr/sfw/lib
>
> Am I missing something obvious?
>
> Bernt Jernberg
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-... at mindrot.org <javascript:>
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
>