similar to: building openssh with openssl-fips: cygwin can't find libcrypto

https://bugzilla.mindrot.org/show_bug.cgi?id=1460 Summary: openssh-4.9p1.tar.gz configure:15943: error: *** Can't find recent OpenSSL libcrypto Classification: Unclassified Product: Portable OpenSSH Version: 5.0p1

Hi, How do I make OpenSSH FIPS compliant? Will just compiling with OpenSSL version that is built with a FIPS validated module, make it FIPS compliant? I see sshd linked to both libcrypt and libcrypto. How do I make sure sshd runs only in FIPS mode? Appreciate any help. Thanks, Chandana

My office is currently using WRQ Reflections as it was FIPS compliant. But this option is an expense that we'd like to get rid of if possible. Putty is not an option for us since it uses it's own OpenSSL libs and we need it FIPS enabled. I've been able to build OpenSSL 0.9.8o and enable the fipcanister.lib and create the openssl executables and libraries. I've been able to find

hi all, > configure fails w/: > > ... > checking whether getpgrp requires zero arguments... yes > checking OpenSSL header version... not found > configure: error: OpenSSL version header not found. i first suspected the 'culprit' to be the following stanza in "contrib/findssl.sh": ... echo Searching for OpenSSL header files. if [ -x "`which

Hi OpenSSh Developer, Currently, I can make openssh-5.0p1 working in FIPS mode. The detail steps I did are as follows. 1) Build FIPS OpenSSL according to FIPS User Guide(http://www.openssl.org/docs/fips/) on HP-UX PA 11.23 box. FIPS object module is generated by compiling openssl-fips-1.1.2. FIPS OpenSSL is built by openssl-0.9.7m, which is passed fips option for Configure step. 2) Modify

Hi All: I tried to rebuild openssl with the FIPS modules, and then install the new openssl libs (lib crypto.so to be specific) on my Ubuntu 12.04 box. After that I noticed it seemed to break OpenSSH: I couldn't login to the box using ssh, and couldn't run the client command like ssh-keygen either. My questions are: 1. Does OpenSSH support FIPS mode? 2. Or does OpenSSH support with

I've Problems to compile openssh 3.9.pm1 on AIX 5.2 with openssl-devel-0.9.6m-1 On Configure I've the following Error: ./configure --with-ssl-dir=/usr/local/ssl/include/openssl/ --sysconfdir=/etc/ssh --with-zlib=/usr/local checking OpenSSL header version... not found configure: error: OpenSSL version header not found. ./contrib/findssl.sh Searching for OpenSSL header files. 0x009060dfL

On Tue, 18 Apr 2023, Norbert Pocs wrote: > Hi OpenSSH mailing list, > > I would like to announce the newly introduced patch in Fedora rawhide [0] > for > > FIPS compliance efforts. The change will be introduced in an upcoming RHEL 9 > > version. > > The patch targets OpenSSL support of OpenSSH, specifically the usage of > > old low level API. The new

Dear Damien, On Wed, Apr 19, 2023 at 7:13?AM Damien Miller <djm at mindrot.org> wrote: > > On Tue, 18 Apr 2023, Norbert Pocs wrote: > > > Hi OpenSSH mailing list, > > > > I would like to announce the newly introduced patch in Fedora rawhide [0] > > for > > > > FIPS compliance efforts. The change will be introduced in an upcoming RHEL 9 > >

Hello, I am trying to compile openssh v6.5p1 with openssl-1.0.1f and it doesn't seem to find my custom openssl libraries and defaults to the system version. This has been working on all previous openssh version until v6.5. Is this a bug ? More details below: [root at test openssh-6.5p1]# ./configure --prefix=/usr/local/openssh-6.5p1 --with-tcp-wrappers --with-selinux --with-kerberos5

I've Problems to compile openssh 3.9.pm1 on AIX 5.2 with openssl-devel-0.9.6m-1 On Configure I've the following Error: ./configure --with-ssl-dir=/usr/local/ssl/include/openssl/ --sysconfdir=/etc/ssh --with-zlib=/usr/local checking OpenSSL header version... not found configure: error: OpenSSL version header not found. ./contrib/findssl.sh Searching for OpenSSL header files. 0x009060dfL

Thanks for the quick reply Jeremy. We have other FIPS compliant libraries, which check for, and ensure the proper FIPS compliant algorithms are used. Is there a link option to specify this kind of library ? ~ Mike -----Original Message----- From: Jeremy Allison <jra at samba.org> Sent: Tuesday, October 2, 2018 2:08 PM To: Tompkins, Michael <Michael.Tompkins at xerox.com> Cc:

http://bugzilla.mindrot.org/show_bug.cgi?id=269 ------- Additional Comments From dtucker at zip.com.au 2002-06-09 15:31 ------- First of all, are you sure you want to do that? The OpenSSL INSTALL file says: "Shared library is currently an experimental feature. The only reason to have them would be to conserve memory on systems where several program are using OpenSSL. Binary

Thanks Roumen. >Lets assume that application use OpenSSL FIPS validated module. FIPS mode is activated in openssl command if environment variable OPENSSL_FIPS is set. Similarly I use OPENSSL_FIPS environment variable to activate FIPS mode. Code will call FIPS_mode_set(1) if crypto module is not FIPS mode. Did you mean the FIPS patched OpenSSH server and client (such as ssh-keygen) always

Thanks Roumen. I have few more questions below: 1. What version of OpenSSH can the patch be applied to? What branch should I check out the patch? 2. >Impact is not only for source code. Build process has to be updated as well. Red Hat is based on "fipscheck". What build process should be changed? What is fipscheck? 3. My understanding any application (such as OpenSSH) which need

Hi experts, Current I am doing FIPS gap analysis for our product, can someone help to have a look my questions? Our product is server running under CentOS 6.x, and according to the upstream (RedHat) document, CentOS can be configured to FIPS mode:

Michael Selvesteen wrote: >I use OpenSSH 3.9 on HP-UX 11vi. I compiled OpenSSL 0.9.7e by enabling >FIPS. I found in the FIPS document that OpenSSL now contains the >FIPS 140 specific cryptographic API and algorithm implementations >only; i.e. the API for low level algorithms (RSA, AES, 3DES, DSA, >SHA-1). Does it have any functional impacts on SSH. > >Will all the

Hello, I recently installed a newer version of OpenSSL on my system and decided to get the latest of OpenSSH as well. I installed OpenSSL 0.9.8k without any difficulty. When I tried to install OpenSSH, however, I got this message: checking OpenSSL header version... 9080bf (OpenSSL 0.9.8k 25 Mar 2009) checking OpenSSL library version... 90701f (OpenSSL 0.9.7a Feb 19 2003) checking whether

I'm checking back in to see if samba is FIPS compliant, as in using FIPS compliant algorithms ? Can it be built with openssl, which is FIPS compliant ? We're currently running 4.7.5. Please let me know. Regards, Mike

Thanks Jakub. How does this patch match the OpenSSH source version? Does the patch only applicable to OpenSSH version 6.6.1, or does other version available as well? Thanks. On Fri, Dec 4, 2015 at 4:26 AM, Jakub Jelen <jjelen at redhat.com> wrote: > > On 12/04/2015 03:26 AM, security veteran wrote: > >> 3. Is there a way to re-compile OpenSSH by turning on/off some flags