On Wed, 2010-03-10 at 07:44 -0500, Nico Kadel-Garcia wrote:

> I don't see your SRPM. But I don't read Russian.

These packages are not mine and I am in no way affiliated with the
person that is providing them. I was just to let the OP know, that such
a thing does exist, although not in RPMForge.

In what concerns Russian, you can use Google Translate. The direct link
to the packages is here: http://centos.alt.ru/pub/openssh/ .

> Installing such a core security tool as a binary from an unknown
> developer or vendor is probably a bad idea. There are enough changes
> between 4.8 and 5.x, particularly in the support of Kerberos
> authrntication, that I'd be quite cautious of an encryption software
> RPM that grants login privileges, from an unknown source. Not that I'm
> saying you did anything wrong or illicit, but there have been times
> when even commercial providers, like RedHat, had their build machines
> corrupted and potentially cracked binaries published and signed with
> their GPG keys.

What prevents you from grabbing the SRPM, checking the SPEC and
rebuilding it against the sources that you can fetch from the OpenSSH
website?
 
-- 
Sincerely yours,
Yury V. Zaytsev

_______________________________________________
suggest mailing list
[email protected]
http://lists.rpmforge.net/mailman/listinfo/suggest

Reply via email to