Thanks for the info.

It appears that the bundled openssl is version 0.9.7d.
Loaded up openssl-0.9.7e in the standard /usr/local/ssl location.
I then added the --with-ssl=/usr/local/ssl parameter to the config run.

It built just fine.

The regression tests fail due to issues with the location of the ssh-rand-helper.
I ran the install then, and it went fine, and the binary works.
Once it had loaded the ssh-rand-helper to where it wanted it, I re-ran the make
tests command again, successfully.

So, the end-result is this.


Vanilla openssl-0.9.7e must be installed.
configure must be run with the --with-openssl-dir=/usr/local/ssl parameter.
Regression tests appear to want to run ssh-rand-helper from the install
location, not the build directory for some reason.
Otherwise, it makes fine, and installs correctly.

Thanks again.

Hope this helps someone out.

> Darren Tucker wrote:
> > wrote:
> >
> >> gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o
> >> sshconnect1.o
> >> sshconnect2.o -L. -Lopenbsd-compat/ -lssh -lopenbsd-compat -lresolv
> >> -lcrypto
> >> -lrt -lz -lsocket -lnsl
> >> Undefined first referenced
> >> symbol in file
> >> EVP_aes_192_cbc ./libssh.a(cipher.o)
> >> EVP_aes_256_cbc ./libssh.a(cipher.o)
> >> ld: fatal: Symbol referencing errors. No output written to ssh
> >> collect2: ld returned 1 exit status
> >> gmake: *** [ssh] Error 1

> >
> >
> > It looks like the Sun-supplied OpenSSL (which I believe is modified?)
> > does not have the 192-bit and 256-bit AES functions. Does it work with
> > the vanilla OpenSSL distribution? (Possibly you will have to "configure
> > --with-ssl-dir=/usr/local/ssl").

> That can bite you when you build apache2 with SSL as well (just
> for the record )

openssh-unix-dev mailing list