Displaying 20 results from an estimated 4000 matches similar to: "OSSH_PATH_ENTROPY_PROG' unexpected"
2001 Jun 07
2
Patch to enable multiple possible sources of entropy
I have a need to have the same OpenSSH binaries run on multiple machines
which are administered by different people. That means on Solaris, for
example, there will be some with /dev/random, some on which I can run prngd
because they'll be installing my binaries as root, and some which will have
neither because they will be only installed as non-root. Below is a patch
to enable choosing all 3
2001 May 15
0
openssh 2.9p1 on Solaris 2.6 with AFS
hello,
I'm attempting to compile 2.9p1 on Solaris 2.6 with AFS support.
I am not using Kerberos aside from AFS. The installation notes state
that Kerberos IV is required by AFS. Since the Kerberos libraries and
header files do not appear to be distributed with AFS, I downloaded and
installed ftp://ftp.pdc.kth.se/pub/krb/src/krb4-1.0.8.tar.gz
./configure --sysconfdir=/etc/ssh
2001 Oct 26
2
problems building on solaris 2.6
Using the latest cvs sources, the compilation of ssh.c fails.
The 'struct rlimit rlim;' line is being expanded by cpp into
'struct rlimit64 rlim;' and there is no struct rlimit64 defined.
In order to get the struct rlimit64 to be included when the
#include <sys/resource.h>
is used, it appears to need the _LARGEFILE64_SOURCE symbol defined OR
it needs the '#if
2001 Oct 31
1
OpenSSH-3.0p1-pre-CVS: configure.ac checks for login in -lutil and -lbsd?
OpenSSH-3.0p1-pre, from CVS as of about 2001-10-30 23:45 UTC.
Any particular reason why configure is checking for login() in -lutil,
finds it, then checks for it again in -lbsd?
Here's the relevant excerpts (Red Hat Linux 6.2, , kernel-2.2.19,
glibc-2.1.3, egcs-1.1.2, autoconf-2.52):
$ CFLAGS='-O2 -mpentium -Wall'; export CFLAGS
$ ./configure
2001 May 21
1
2.9p1 patches
1. Add support for files >2GB via Paul Eggert's AC_SYS_LARGEFILE
macro. This macro is now part of autoconf 2.50. Because of this,
"config.h" needs to be included before system headers to get
the appropriate defines for LFS support.
openbsd-compat/sigact.c
configure.in
acinclude.m4
2. AIX defines TILDE in <sys/ioctl.h>. Rename to TILDE_CHAR. Feel
2001 Dec 21
6
Killing the builtin entropy code
Over the holidays, I intend to finally rid portable OpenSSH of the
builtin entropy collection code. Here's what I intend to do:
When init_rng is called, we'll check OpenSSL's RAND_status(). If this
indicates that their PRNG is already seeded, we'll do nothing. This
effectively detects platforms which have /dev/urandom (or similar)
configured into OpenSSL.
If OpenSSL isn't
2001 Feb 13
1
configure.in reorder patch
Feb 12 CVS (sort of, see warning below)
I've had to change around some of the code in configure.in
to get some platforms to compile with the --with-tcp-wrappers option.
Basicly I have set it up to
check headers
check system libraries
check for optional packages
check functions
I have also tried to clean up the library order as it is important
on some platforms.
This patch works on
Solaris
2002 Jan 17
0
[Bug 71] New: configure is looking for zlib but I don't have one and I can't turn zlib off.
http://bugzilla.mindrot.org/show_bug.cgi?id=71
Summary: configure is looking for zlib but I don't have one and I
can't turn zlib off.
Product: Portable OpenSSH
Version: 3.0.2p1
Platform: Sparc
OS/Version: Solaris
Status: NEW
Severity: critical
Priority: P2
Component: Build
2003 Jun 23
1
OpenSSL on AIX
Hi,
with current test releases SSL doesn't work anymore for me on AIX 4.3
with dovecot-0.99.10-test14. It worked with 0.99.9.1.
dovecot: Jun 23 19:42:23 Info: Dovecot starting up
imap-login: Jun 23 19:42:25 Fatal: RAND_bytes() failed: error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded
imap-login: Jun 23 19:42:25 Fatal: RAND_bytes() failed: error:24064064:random number
2000 Aug 11
1
compiling openssh-2.1.1p4 on SPARC Solaris 8
I'm trying to compile openssh-2.1.1p4 on a Sparc machine running Solaris
8. I've got all sorts of patches installed. The compiler is gcc
2.95.2. I was originally trying to get the ssh from www.ssh.com, not
the OpenSSH, to work, but that's another story in and of itself, so I'm
trying this opensource version in hopes of better success.
I'm not exactly sure what a 'cross
2001 Apr 10
2
Compiling openssh 2.5.p1 on unixware 7.0.1
Hi.
I'm tryng to compile openssh 2.5.p1 (latest)
on sco unixware 7.0.1 and I'm getting
this error in make:
cc -o sshd sshd.o auth.o auth1.o auth2.o auth-chall.o auth2-chall.o
auth-rhosts.o auth-options.o auth-krb4.o auth-pam.o auth2-pam.o
auth-passwd.o auth-rsa.o auth-rh-rsa.o auth-sia.o dh.o sshpty.o log-server.o
sshlogin.o loginrec.o servconf.o serverloop.o md5crypt.o session.o
2001 Jan 18
1
Announcement: PRNGD 0.9.0 available
Hi!
I have just made the 0.9.0 release of PRNGD available.
PRNGD is the Pseudo Random Number Generator Daemon.
It has an EGD compatible interface and is designed to provide entropy
on systems not having /dev/*random devices.
Software supporting EGD style entropy requests are openssh, Apache/mod_ssl,
Postfix/TLS... Automatic querying of EGD sockets at fixed locations has
been introduced in the
2002 Jan 22
4
ssh-rand-helper
Now that ssh-rand-helper has been segregated into a separate program,
I'd like to revisit an old question about its entropy gathering.
- would it be desirable to make it possible for ssh-rand-helper to fall
back to external commands if PRNGD cannot be reached, instead of
choosing one or the other at compile time?
- When using PRNGD, the program gets 48 bytes of entropy from PRNGD,
2003 Jan 31
3
OpenSSH & OpenSSL directory location problem.
Problem: scp does not work with custom openssl library location
OpenSSH & OpenSSL directory location problem.
checking whether snprintf correctly terminates long strings... yes
checking whether getpgrp requires zero arguments... yes
checking OpenSSL header version... 90608f (OpenSSL 0.9.6h [engine] 5
Dec 2002)
checking OpenSSL library version... 90608f (OpenSSL 0.9.6h [engine] 5
Dec
2001 Jul 26
7
Updated Cray patch against openssh SNAP-20010725
This patch fixes my botched attempted to patch deattack.c.
I created a bsd-cray.h file and cleaned up a few error cases
in bsd-cray.c. Fixed cray_setup call to pass uid and login name
in session.c and moved its call so that its called with root privs.
Its been tested on a irix, sun, aix, unicos(SV1) and unicosmk(T3E)
systems.
If you are building this on a T3E you may have to edit the Makefile
2001 Oct 02
2
New feature: remote entropy gatherer port
[NOTE: I'm new to this list and this is my first
approach to OpenSSH code.]
I've enhanced "--with-prngd-port=PORT" flag to accept an
optional hostname as in "myhost:myport", e.g.:
% ./configure --with-prngd-port=example.com:12345
Although I'm certain that this may cause big trouble if remote
gatherer isn't online (ssh will refuse to open any connection)
I
2001 Jul 11
0
Solaris 2.6: Undefined symbol seed_rng
Hi,
I hope I'm not asking some FAQ, but I can't compile openssh-2.9p2 on
maas34:openssh-2.9p2 {173} uname -a
SunOS maas34 5.6 Generic_105181-23 sun4u sparc SUNW,Ultra-5_10
using:
maas34:openssh-2.9p2 {174} gcc -v
Reading specs from /opt/local/gcc-2.95.2/lib/gcc-lib/sparc-sun-solaris2.6/2.95.2/specs
gcc version 2.95.2 19991024 (release)
I get:
maas34:openssh-2.9p2 {172}
2002 Mar 08
2
Cannot run OpenSSH 3.1p1 on Solaris 8, Irix 6.5.14, Irix 6.5.4, SunOS 4.1.3_U1 - ssh-rand-helper child produced insufficient data
I have successfully compiled OpenSSH 3.1p1 for the following systems:
Solaris 8
Solaris 7
Irix 6.5.14
Irix 6.5.4
SunOS 4.1.3_U1
Unfortunately, the new sshd is not working on any of the above systems
with the exception of Solaris 7. (I then put the Solaris 7 executables
on Solaris 8, and they worked there too.)
This is the error I'm getting:
$ /usr/etc/sshd -D -d -d -d
debug3: Seeing PRNG
2002 Jul 01
0
[Bug 328] New: starting sshd yeilds PRNG not seeded
http://bugzilla.mindrot.org/show_bug.cgi?id=328
Summary: starting sshd yeilds PRNG not seeded
Product: Portable OpenSSH
Version: -current
Platform: Sparc
OS/Version: Solaris
Status: NEW
Severity: major
Priority: P1
Component: sshd
AssignedTo: openssh-unix-dev at mindrot.org
ReportedBy:
2006 Mar 17
1
[PATCH] OpenSSL RNG initialization
Hi,
dovecot tries to use OpenSSL's PRNG to generate random numbers if
there is no /dev/urandom found. Unfortunately, it is flawed in its
present
form, since the PRNG is not seeded before RAND_bytes() is called in
src/lib/randgen.c (on systems which have /dev/urandom, OpenSSL
automatically seeds its PRNG from the urandom device).
Here's a patch to address this issue: it tries to seed