From owner-freebsd-stable  Sat Jul 29 10:34:17 2000
Delivered-To: freebsd-stable@freebsd.org
Received: from zibbi.mikom.csir.co.za (zibbi.mikom.csir.co.za [146.64.24.58])
	by hub.freebsd.org (Postfix) with ESMTP id B2C7137B85B
	for <freebsd-stable@FreeBSD.ORG>; Sat, 29 Jul 2000 10:33:54 -0700 (PDT)
	(envelope-from jhay@zibbi.mikom.csir.co.za)
Received: (from jhay@localhost)
	by zibbi.mikom.csir.co.za (8.10.1/8.10.1) id e6THXUn88664;
	Sat, 29 Jul 2000 19:33:30 +0200 (SAT)
From: John Hay <jhay@icomtek.co.za>
Message-Id: <200007291733.e6THXUn88664@zibbi.mikom.csir.co.za>
Subject: Re: SSH in 4.1 RELEASE for NonUS users
In-Reply-To: <4.3.2.20000729114028.00ac5a20@207.227.119.2> from "Jeffrey J. Mountin" at "Jul 29, 2000 12:03:31 pm"
To: jeff-ml@mountin.net (Jeffrey J. Mountin)
Date: Sat, 29 Jul 2000 19:33:30 +0200 (SAT)
Cc: jhay@icomtek.co.za (John Hay), Mike@perlguru.com (Mike),
	freebsd-stable@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL54 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> >You have 2 options. If you have the crypto distribution with source, you
> >can go into /usr/src/secure/lib/librsaintl and build and install it. If
> >you don't want to build it, you can install the crypto distribution from
> >ftp.internat.freebsd.org, its crypto distibution was built with
> >USA_RESIDENT=NO and should give you librsaINTL* which is what is needed.
> 
> Doesn't one also need the following in make.conf:
> 
> MAKE_RSAINTL=  YES # RSA (public key exchange)
> 
> The change was done earlier this month.  Replaced RSAREF and was 
> WITH_RSAINTL until the 14th.  Setting USA_RESIDENT=YES is only a part of 
> the check:
> 
> .if exists(${.CURDIR}/../../crypto/openssl/crypto/rsa/rsa_eay.c) && \
>      (${USA_RESIDENT} != YES || defined(MAKE_RSAINTL))
> SUBDIR+=librsaintl
> .endif
> 

No, you only need USA_RESIDENT=NO. It won't harm if you have MAKE_RSAINTL=YES,
but it isn't needed. MAKE_RSAINTL=YES is meant as a kind of override if
USA_RESIDENT=YES I think. Maybe the idea was to be able to build both.

John
-- 
John Hay -- John.Hay@icomtek.csir.co.za


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message