> Dennis Clarke wrote:
>>> Hi Dennis,
>>>
>>> Thanks for the response. Below it says "libcrypto_extra.so.0.9.8 =>
>>> (file not found)" is unresolved
>>>
>>
>> guess what !?!
>>
>> I have the very same thing here also !   surprise surprise on me eh ?
>>
>> bash-3.2$ uname -a
>> SunOS aequitas 5.11 snv_69 i86pc i386 i86pc
>> bash-3.2$ ldd /usr/bin/ssh
>>         libsocket.so.1 =>        /lib/libsocket.so.1
>>         libnsl.so.1 =>   /lib/libnsl.so.1
>>         libz.so.1 =>     /usr/lib/libz.so.1
>>         libcrypto.so.0.9.8 =>    /usr/sfw/lib/libcrypto.so.0.9.8
>>         libgss.so.1 =>   /usr/lib/libgss.so.1
>>         libc.so.1 =>     /lib/libc.so.1
>>         libmp.so.2 =>    /lib/libmp.so.2
>>         libmd.so.1 =>    /lib/libmd.so.1
>>         libscf.so.1 =>   /lib/libscf.so.1
>>         libuutil.so.1 =>         /lib/libuutil.so.1
>>         libgen.so.1 =>   /lib/libgen.so.1
>>         libcrypto_extra.so.0.9.8 =>      (file not found)
>>         libm.so.2 =>     /lib/libm.so.2
>>
>> However on Solaris 10 8/07 I have no such problem :
>>
>> $ uname -a
>>
>
> If I remember correctly, libcrypto_extra.so.0.9.8 comes with the
> optional Solaris 10 encryption kit which adds strong(er) encryption that
> that which comes out of
> the box with (Open)Solaris.  It's not necessary to the operation of the
> box or ssh.  I think the reason why it's not included is due to old ITAR
> regulations which limited the exportation
> of encryption technologies.

Well I have stock out of the box Solaris 10 8/07 here :

$ which ssh
/usr/bin/ssh
$ ldd /usr/bin/ssh
        libsocket.so.1 =>        /lib/libsocket.so.1
        libnsl.so.1 =>   /lib/libnsl.so.1
        libz.so.1 =>     /usr/lib/libz.so.1
        libcrypto.so.0.9.7 =>    /usr/sfw/lib/libcrypto.so.0.9.7
        libgss.so.1 =>   /usr/lib/libgss.so.1
        libc.so.1 =>     /lib/libc.so.1
        libmp.so.2 =>    /lib/libmp.so.2
        libmd.so.1 =>    /lib/libmd.so.1
        libscf.so.1 =>   /lib/libscf.so.1
        libcmd.so.1 =>   /lib/libcmd.so.1
        libdoor.so.1 =>  /lib/libdoor.so.1
        libuutil.so.1 =>         /lib/libuutil.so.1
        libgen.so.1 =>   /lib/libgen.so.1
        libcrypto_extra.so.0.9.7 =>      /usr/sfw/lib/libcrypto_extra.so.0.9.7
        libm.so.2 =>     /lib/libm.so.2
$ /usr/bin/ssh -2 -4 -e\^ -c aes256-cbc aequitas
Unknown cipher type 'aes256-cbc'
$

So that isn't what is going on.

Meanwhile the OpenSSH from Blastwave works out of the box with aes256 :

$ /opt/csw/bin/ssh -2 -4 -e\^ -c aes256-cbc aequitas
Enter passphrase for key '/export/home/dclarke/.ssh/id_rsa':
Last login: Mon Oct 15 18:42:51 2007 from titan
Sun Microsystems Inc.   SunOS 5.11      snv_69  October 2007
$ uname -a
SunOS aequitas 5.11 snv_69 i86pc i386 i86pc

Dennis

_______________________________________________
opensolaris-discuss mailing list
[email protected]

Reply via email to