Call for testing: OpenSSH 7.6

Phil Pennock
Mon, 25 Sep 2017 02:12:25 -0000

On 2017-09-24 at 17:37 -0700, Kevin Brott wrote:
> On 09/20/2017 05:47 PM, Damien Miller wrote:
> > Hi,
> >
> > OpenSSH 7.6p1 is almost ready for release, so we would appreciate
testing
> > on as many platforms and systems as possible. This is a bugfix
release.
>
> openssh-SNAP-20170925.tar.gz && git clone as of 2017/09/24 @ 17:20
PDT
>
> OpSys??? ?? ? ? Compiler?? OpenSSL???? Build???? Test
> Debian 8.9??? gcc 4.9.2??? 1.0.1t??? ??? YES??? ??? all tests passed
> Debian 9.1??? gcc 6.3.0??? 1.1.0f??? ??? NO *1
>
> Looks like the default openssl version on Debian 9 is 1.1.0f, which
according to the INSTALL doc is a deal-breaker (LibreSSL or OpenSSL >= 0.9.8f
< 1.1.0).

Debian 9.1 is one of the ones I tested on and it worked, so I looked
into this: it looks like Debian 9.1 has libssl installed for both 1.0.2l
and 1.1.0f, but then the openssl package for the latter, providing only
the command-line interface.


https://people.spodhuis.org/phil.pennock/openssh-testing/SNAP-20170925/bento-debian9.1.txt

A plain install of Debian includes neither set of dev headers, the
"apt-get build-dep openssh" step installed "libssl1.0-dev".
The plain
install I got included both binary-library packages by default.

"libssl1.0-dev" and "libssl-dev" have mutual Conflicts:
declarations so
installing one should auto-remove the other.

-----------------------------8< cut here >8-----------------------------
vagrant at debian-9:~$ dpkg -l \*openssl\* libssl\*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                         Version             Architecture
Description
+++-============================-===================-===================-=============================================================un
libssl-dev                   <none>              <none>
(no description available)
ii  libssl1.0-dev:amd64          1.0.2l-2            amd64               Secure
Sockets Layer toolkit - development files
ii  libssl1.0.2:amd64            1.0.2l-2            amd64               Secure
Sockets Layer toolkit - shared libraries
ii  libssl1.1:amd64              1.1.0f-3            amd64               Secure
Sockets Layer toolkit - shared libraries
ii  openssl                      1.1.0f-3            amd64               Secure
Sockets Layer toolkit - cryptographic utility
un  python3-openssl              <none>              <none>
(no description available)
-----------------------------8< cut here >8-----------------------------

-Phil