On 1
?4?
December 2016 at
?11?
:
?53?
, <
?djm?
@mindrot.org> wrote:> Hi,
>
> OpenSSH 7.4 is almost ready for release, so we would appreciate testing
> on as many platforms and systems as possible. This release contains some
> substantial new features and a number of bugfixes.
>
> Snapshot releases for portable OpenSSH are available from
> http://www.mindrot.org/openssh_snap/
>
> The OpenBSD version is available in CVS HEAD:
> http://www.openbsd.org/anoncvs.html
>
> Portable OpenSSH is also available via anonymous CVS using the
> instructions at http://www.openssh.com/portable.html#cvs or
> via Git at https://anongit.mindrot.org/openssh.git/ or via a
> mirror at Github: https://github.com/openssh/openssh-portable
>
> Running the regression tests supplied with Portable OpenSSH does not
> require installation and is a simply:
>
> $ ./configure && make tests
>
> Live testing on suitable non-production systems is also
> appreciated. Please send reports of success or failure to
> openssh-unix-dev at mindrot.org.
>
> Below is a summary of changes. More detail may be found in the ChangeLog
> in the portable OpenSSH tarballs.
>
> Thanks to the many people who contributed to this release.
Tested:
* git commit
4a354fc2
? from master of github's mirror of openssh-portable
* on macOS Sierra
using LibreSSL 2.4.4
Outcome:
* successfully built
* all tests passed
Live testing:
* connected to Linux amd64 host running sshd 7.3p1:
* passphrase-protected ed25519 client key + certificate
* ed25519 host key + certificate
* chacha20-poly1305 cipher
I note that clang (Apple LLVM version 8.0.0 (clang-800.0.42.1)) warned
about the unused '-pie' flag supplied as a linker argument:
clang: warning: argument unused during compilation: '-pie
Summary output of the configure script is included at the end for reference
(note that 'gcc' is an alias for 'clang' on this platform).
Regards,
Masud.
OpenSSH has been configured with the following options:
User binaries: /usr/local/bin
System binaries: /usr/local/sbin
Configuration files: /usr/local/etc
Askpass program: /usr/local/libexec/ssh-askpass
Manual pages: /usr/local/share/man/manX
PID file: /var/run
Privilege separation chroot path: /var/empty
sshd default user PATH:
/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
Manpage format: doc
PAM support: no
OSF SIA support: no
KerberosV support: no
SELinux support: no
Smartcard support:
S/KEY support: no
MD5 password support: no
libedit support: no
Solaris process contract support: no
Solaris project support: no
Solaris privilege support: no
IP address in $DISPLAY hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: OpenSSL internal ONLY
Privsep sandbox style: darwin
Host: x86_64-apple-darwin16.3.0
Compiler: gcc
Compiler flags: -g -O2 -Qunused-arguments -Wunknown-warning-option
-Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security
-Wsizeof-pointer-memaccess -Wno-pointer-sign -Wno-unused-result
-fno-strict-aliasing -D_FORTIFY_SOURCE=2 -ftrapv -fno-builtin-memset
-fstack-protector-strong -fPIE
Preprocessor flags: -I/usr/local/opt/libressl/include
Linker flags: -L/usr/local/opt/libressl/lib -fstack-protector-strong
-pie
Libraries: -lcrypto -lz -lresolv
+for sshd: -lsandbox