On Sunday, May 7, 2023 7:08 PM, Darren Tucker wrote: >On Mon, 8 May 2023 at 06:13, <rsbecker@xxxxxxxxxxxxx> wrote: >[...] >> Is this not already covered using the --without-openssl-header-check >> configuration option? > >No. That configure option will disable the consistency check between the headers >and library versions at compile time, ie the API. It was added when some vendors >(from memory, Apple) started shipping libcrypto updates without the corresponding >header updates. > >This diff posted affects the check between the version it was compiled against and >the currently installed library version, ie the ABI. >OpenSSL improved the ABI compatibility from "must be the same minor release" in >1.x to "must be the same major release" in 3.x but we currently only have the 1.x >checks. Damien had a slightly different diff that also fixed this, not sure what >happened to it. Thanks, I understand better now. --Randall _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev