From owner-freebsd-current Fri Feb 25 21:35:41 2000 Delivered-To: freebsd-current@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id E4B3A37BC5C; Fri, 25 Feb 2000 21:35:39 -0800 (PST) (envelope-from kris@FreeBSD.org) Received: from localhost (kris@localhost) by freefall.freebsd.org (8.9.3/8.9.2) with ESMTP id VAA65167; Fri, 25 Feb 2000 21:35:39 -0800 (PST) (envelope-from kris@FreeBSD.org) X-Authentication-Warning: freefall.freebsd.org: kris owned process doing -bs Date: Fri, 25 Feb 2000 21:35:39 -0800 (PST) From: Kris Kennaway To: Munehiro Matsuda Cc: freebsd-current@freebsd.org Subject: Re: buildworld failed in libpam due to crypto changes. In-Reply-To: <20000226130151R.haro@tk.kubota.co.jp> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, 26 Feb 2000, Munehiro Matsuda wrote: > Hi all, > > Buildworld failed due to crypto related changes in libpam. > With following patch, buildworld and installworld went successful for me. This patch looks correct to me, with one change. However I think the pam_ssh module needs to go under secure/ with the rest of the crypto code because of export restrictions (I know the regulations changed, but we dont yet have a legal ruling on it). > -.if !defined(NO_OPENSSL) > +.if exists(${.CURDIR}/../../../crypto) && !defined(NO_OPENSSL) .if exists(${.CURDIR}/../../../crypto) && !defined(NO_OPENSSL) && !defined(NO_OPENSSH) NO_OPENSSL should imply NO_OPENSSH since the latter depends on the former, but we also use NO_OPENSSH in other places to turn it off more finely. Kris ---- "How many roads must a man walk down, before you call him a man?" "Eight!" "That was a rhetorical question!" "Oh..then, seven!" -- Homer Simpson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message