I think I found what is tripping me up...
OpenSSL 0.9.8f was released with the status byte = '0', rather then 'f',
for release:
In crypto/opensslv.h
.
.
.
#define OPENSSL_VERSION_NUMBER 0x00908070L
.
.
.
OpenSSH will ignore the letter part of the version f, g, h, etc. (the
patch level), but does look at the status. Since 0.9.8f's status = 0 and
0.9.8h's status = f, it does not like switching between them.
Dan
[EMAIL PROTECTED]
To: [email protected]
cc:
Subject: OpenSSH 5.0p1 ignoring --without-openssl-header-check
LSN: Not Relevant
User Filed as: Not a Record
It seems like OpenSSH 5.0p1 is ignoring the
'--without-openssl-header-check' switch when being built. I configure the
build using the command:
./configure --prefix=/usr/local --with-zlib=/usr/local/lib
--with-ssl-dir=/usr/local/ssl --without-openssl-header-check
--with-kerberos5=/usr/local
But, after building and moving to a system with a newer version of
OpenSSL, I get:
[EMAIL PROTECTED]:/usr/local>/usr/local/bin/ssh -V
OpenSSL version mismatch. Built against 908070, you have 90808f
I believe this worked with OpenSSH 4.7p1. Am I missing something, or was
this functionality (inadvertently??) removed?
Thanks,
Dan
[EMAIL PROTECTED]
