Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 05 May 2008 19:35:46 +0100
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        karim.bourenane@orange-ftgroup.com
Cc:        freebsd-current@freebsd.org
Subject:   Re: [FreeBsd 7.0] Openldap server - client / error with openssl - openssh
Message-ID:  <481F5382.1030701@infracaninophile.co.uk>
In-Reply-To: <OF58F5C732.33DCE121-ONC1257440.0054A5F4-C1257440.0055DDA4@dc.par.equant.com>
References:  <OF58F5C732.33DCE121-ONC1257440.0054A5F4-C1257440.0055DDA4@dc.par.equant.com>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig7E9664A7986E62106AA5E588
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

karim.bourenane@orange-ftgroup.com wrote:
> Hi,=20
>=20
> I just found security upgrade openssh, but don't running on my ldap=20
> server, same error :
> http://security.freebsd.org/advisories/FreeBSD-SA-08:05.openssh.asc
>=20
> And if i check version of channel.c file after upgrade :
>=20
> serverldap# patch < /var/tmp/openssh.patch
> Hmm...  Looks like a unified diff to me...
> The text leading up to this was:
> --------------------------
> |Index: crypto/openssh/channels.c
> |=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> |RCS file: /home/ncvs/src/crypto/openssh/channels.c,v
> |retrieving revision 1.23
> |diff -u -r1.23 channels.c
> |--- crypto/openssh/channels.c  30 Sep 2006 13:38:04 -0000      1.23 <-=
-=20
> Same value, same version
> |+++ crypto/openssh/channels.c  15 Apr 2008 19:09:48 -0000
> --------------------------
>=20
> Can anyone have idea ?
>=20

idea is patented software IIRC, and you need to add flags to
/etc/src.conf to enable idea realated stuff to be built.  See src.conf(5)=
=2E

I guess the problem you're seeing is because either:

   you built either openssh or openssl on a different machine to where
   you're running it and there's a difference in the WITH/WITHOUT_IDEA
   settings between the two machines

or:

   you built openssh to link against the ports version of openssl
   but you're running on a machine with only the base version installed

(although I'm not certain about that last: I think that scenario would
perhaps result in 'file not found' error messages from ld.so when it coul=
dn't
find the SSL shlibs in /usr/local/lib)

Oh, and FreeBSD 7.0 is definitely freebsd-stable@... material nowadays.

	Cheers,

	Matthew

--=20
Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
                                                  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
                                                  Kent, CT11 9PW


--------------enig7E9664A7986E62106AA5E588
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEAREIAAYFAkgfU4gACgkQ8Mjk52CukIxUQgCeL03W9JxMuoPX2/Je6BQhi4qW
/Q0An1wZDE0fqRhb/2stjr91zWzsg/vY
=76Tv
-----END PGP SIGNATURE-----

--------------enig7E9664A7986E62106AA5E588--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?481F5382.1030701>