Re: OpenSSH 5.0p1 ignoring --without-openssl-header-check

[dan_mitton@xxxxxxx]

I think I found what is tripping me up...

OpenSSL 0.9.8f was released with the status byte = '0', rather then 'f', 
for release:

In crypto/opensslv.h

        .
        .
        .
#define OPENSSL_VERSION_NUMBER  0x00908070L
        .
        .
        .

OpenSSH will ignore the letter part of the version f, g, h, etc. (the 
patch level), but does look at the status.  Since 0.9.8f's status = 0 and 
0.9.8h's status = f, it does not like switching between them.

Dan
Dan_Mitton@xxxxxxx




To:     secureshell@xxxxxxxxxxxxxxxxx
cc:      
Subject:        OpenSSH 5.0p1 ignoring --without-openssl-header-check
LSN: Not Relevant
User Filed as: Not a Record

It seems like OpenSSH 5.0p1 is ignoring the 
'--without-openssl-header-check' switch when being built.  I configure the 

build using the command:

./configure --prefix=/usr/local --with-zlib=/usr/local/lib 
--with-ssl-dir=/usr/local/ssl --without-openssl-header-check 
--with-kerberos5=/usr/local

But, after building and moving to a system with a newer version of 
OpenSSL, I get:

root@nessie:/usr/local>/usr/local/bin/ssh -V
OpenSSL version mismatch. Built against 908070, you have 90808f

I believe this worked with OpenSSH 4.7p1.  Am I missing something, or was 
this functionality (inadvertently??) removed?

Thanks,

Dan

Dan_Mitton@xxxxxxx