Hello, it might be that you compiled and installed 64-bit openssl libraries, but are doing a 32-bit openssh build. In this case your 64-bit openssl libraries are 'not found' (although they are in correct place, and the '--with-ssl-dir' is correctly set), and the openssh Configure scripts falls back to the old/unwanted 32-bit openssl libraries in /usr/sfw/lib This worked for me (on SunOS 5.10 Generic_150401-22 i86pc i386 i86pc Solaris, with gcc (GCC) 3.4.3 ) 1. Configure for openssl x@y:~/build/openssl-1.0.1s > ./Configure solaris-x86-gcc --prefix=/some/path/openssl-1.0.1s --openssldir=/some/path/openssl-1.0.1s/openssl shared (solaris-x86-gcc configures for a 32-bit build. I had to use './Configure' because './config' was throwing errors when solaris-x86-gcc was specified) make, make install, etc.. 2. Configure for openssh-7.2p2: x@y:~/build/openssh-7.2p2 >./configure --prefix /some/path/openssh-7.2p2 --with-ssl-dir=/some/path/openssl-1.0.1s --with-md5-passwords --your-other-options .... No other configuration was needed (LDFLAGS, LD_LIBRARY_PATH, CPPFLAGS, etc..) On Monday, 31 August 2015 17:12:21 UTC+2, Bernt Jernberg wrote: > > Hi, > > I am trying to build the 7.1p1 on Solaris 10 SPARC. > I have build OpenSSL 1.0.1p and installed it in /opt/local/openssl. > Configure options for that: > > export > PATH=/opt/local/bin:/usr/sfw/bin:/usr/ccs/bin:/usr/bin:/usr/sbin:/sbin > export MAKE=gmake > ./Configure shared solaris64-sparcv9-gcc -R/usr/sfw/lib/sparcv9 > -R/opt/local/openssl/lib --prefix=/opt/local/openssl > gmake test > gmake install > > export > PATH=/opt/local/bin:/usr/sfw/bin:/usr/ccs/bin:/usr/bin:/usr/sbin:/sbin > ./configure --sysconfdir=/etc/opt/openssh \ > --prefix=/opt/local \ > --with-solaris-contracts \ > --with-tcp-wrappers=/usr/sfw/lib \ > --with-ssl-dir=/opt/local/openssl \ > --with-audit=bsm \ > --without-bsd-auth \ > --with-zlib=/usr/sfw/lib \ > --with-privsep-path=/var/opt/empty \ > --with-pam \ > --with-privsep-user=sshd \ > --with-default-path=/opt/local/bin:/usr/bin:/usr/sbin:/sbin \ > > --with-superuser-path=/opt/local/sbin:/opt/local/bin:/sbin:/usr/sbin:/usr/bin > > \ > --with-kerberos5=/opt/local > CPPFLAGS='-I/opt/local/openssl/include' LDFLAGS='-L/opt/local/openssl/lib' > > # crle > > Configuration file [version 4]: /var/ld/ld.config > Default Library Path (ELF): > /opt/local/openssl/lib:/lib:/usr/lib:/usr/ccs/lib:/usr/sfw/lib > Trusted Directories (ELF): /lib/secure:/usr/lib/secure (system > default) > > Command line: > crle -c /var/ld/ld.config -l > /opt/local/openssl/lib:/lib:/usr/lib:/usr/ccs/lib:/usr/sfw/lib > > > I am using the default compiler: > > # /usr/sfw/bin/gcc --version > gcc (GCC) 3.4.3 (csl-sol210-3_4-branch+sol_rpath) > Copyright (C) 2004 Free Software Foundation, Inc. > This is free software; see the source for copying conditions. There is NO > warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR > PURPOSE. > > # uname -a > SunOS myhost 5.10 Generic_142900-11 sun4u sparc SUNW,Sun-Fire-V215 > > No matter what I do the configure fails with: > > checking OpenSSL header version... 1000110f (OpenSSL 1.0.1p 9 Jul 2015) > checking OpenSSL library version... configure: error: OpenSSL >= 0.9.8f > required (have "0090704f (OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes > for: > CVE-2005-2969 CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339 > CVE-2006-4343 CVE-2007-5135 CVE-2007-3108 CVE-2008-5077 CVE-2009-0590))") > > It always checks the one installed in /usr/sfw/lib > > Am I missing something obvious? > > Bernt Jernberg > _______________________________________________ > openssh-unix-dev mailing list > openssh-...@xxxxxxxxxxx <javascript:> > https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev > _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
