search for: static_libcrypto

is there a way of specifying preferred key exchange methods on client end with OpenSSL 3.1 using ssh2? i'm trying to determine which key exchange method is actually being used for a connection but i'm i bit confused by the debug messages: ... debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-cbc hmac-md5 none debug1: kex:

...nect.o sshconnect1.o sshconnect2.o sshtty.o readconf.o clientloop.o -L. -Lopenbsd-compat/ -L/usr/kerberos/lib -l ssh -lopenbsd-compat -lresolv -lutil -lz -lnsl /usr/lib/libcrypto.a -lkrb5 -l k5crypto -lcom_err only when: # Do we want to link against a static libcrypto? (1=yes 0=no) %define static_libcrypto 1 ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...90,22 @@ %if %{noip6} --with-ipv4-default \ %endif +%if ! %{suidssh} + --disable-suid-ssh \ +%endif %if %{rescue} --without-pam --with-md5-passwords %else +%if %{kerberos5} --with-pam --with-kerberos5=/usr/kerberos +%else + --with-pam +%endif %endif %if %{static_libcrypto} -perl -pi -e "s|-lcrypto|%{_libdir}/libcrypto.a|g" Makefile +perl -pi -e "s|-lcrypto|%{_libdir}/libcrypto.a -ldl|g" Makefile %endif make @@ -314,7 +327,11 @@ %files clients %defattr(-,root,root) +%if %{suidssh} %attr(4755,root,root) %{_bindir}/ssh +%else +%attr(0755,root...

...------- Additional Comments From mindrot at downhill.at.eu.org 2002-06-28 00:15 ------- OpenSSH >= 3 does not work well with openssl 0.9.5, recompile against 0.9.6 and your Problem is gone (Fetch src.rpm from RH7.3, compile and install it (--nodeps) temporarily, and rebuild ssh with %define static_libcrypto 1 reinstall the old ssl Version and the new ssh. Voila! cu andreas PS: http://bugzilla.mindrot.org/show_bug.cgi?id=141 ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

(These are compiling the .src.rpm from ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/rpm/SRPMS/openssh-3.7.1p1-1.src.rpm) 1) On Red Hat 7.3, with gcc-3.2 with the SSP patch (http://www.research.ibm.com/trl/projects/security/ssp/), rpm --rebuild --define "static_libcrypto 1" openssh-3.7.1p1-1.src.rpm - I needed to add -ldl to the linker flags before it linked. 2) On Red Hat 5.2, with gcc-2.7.2.3, kernel 2.2.20 rpm -bb openssh-3.7.1p1.src.rpm - openbsd-compat/bsd-getpeereid.c didn't find the struct ucred definition from /usr/include/li...

1) Thank you to whoever makes these available. 2) I have a problem with the SRPMS, they will not --rebuild on a RedHat 6.2 system. Can anyone help me to get this to build here? [root openssh]# rpm --rebuild openssh-3.0.1p1-1.src.rpm Installing openssh-3.0.1p1-1.src.rpm line 74: Unknown tag: 0.9.5a Some Info: [root openssh]# rpm -qa | grep rpm rpm-python-3.0.5-9.6x rpm-build-3.0.5-9.6x

...changes have been made on the openssh.spec file: # Do we want to disable building of x11-askpass? (1=yes 0=no) %define no_x11_askpass 1 # Do we want to disable building of gnome-askpass? (1=yes 0=no) %define no_gnome_askpass 1 # Do we want to link against a static libcrypto? (1=yes 0=no) %define static_libcrypto 0 # Do we want smartcard support (1=yes 0=no) %define scard 0 # Use Redhat 7.0 pam control file # %define redhat7 0 The machine has the following library versions: glibc-profile-2.1.3-23 compat-glibc-5.2-2.0.7.1 glib-1.2.6-2 glib-devel-1.2.6-2 glib10-1.0.6-6 glibc-devel-2.1.2-11 glibc-2.1.3-23 r...

...+++ openssh.spec.orig 2003-01-21 11:30:34.000000000 -0700 @@ -9,7 +9,7 @@ %define no_x11_askpass 0 # Do we want to disable building of gnome-askpass? (1=yes 0=no) -%define no_gnome_askpass 1 +%define no_gnome_askpass 0 # Do we want to link against a static libcrypto? (1=yes 0=no) %define static_libcrypto 0 @@ -24,10 +24,10 @@ %define build6x 0 # Disable IPv6 (avoids DNS hangs on some glibc versions) -%define noip6 1 +%define noip6 0 # Do we want kerberos5 support (1=yes 0=no) -%define kerberos5 0 +%define kerberos5 1 # Whether or not /sbin/nologin exists. %define nologin 1 Also, I saw...

Outside the known 'Hang-on-exit' bug and the Solaris 'PAM_TTY_KLUDGE' required. *WHAT* other issues *MUST* be address before 3.0 which is approaching fast? Those running NeXTStep I need conformation that it works under NeXT. My current Slab is packed in a storage unit due to a fire in my apartment complex (happened above me so I'm wrapping up dealing with that crap =). -