Date: Wed, 29 Jan 2003 07:03:12 -0600 From: "Jacques A. Vidrine" <nectar@FreeBSD.org> To: Peter Wemm <peter@wemm.org> Cc: "Matthew N. Dodd" <winter@jurai.net>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/secure/lib/libcrypto opensslconf-alpha.h opensslconf-i386.h opensslconf-ia64.h opensslconf-powerpc.h opensslconf-sparc64.h Message-ID: <20030129130312.GA17951@opus.celabo.org> In-Reply-To: <20030129074300.5237A2A89E@canning.wemm.org> References: <20030129021501.GB51683@opus.celabo.org> <20030129074300.5237A2A89E@canning.wemm.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jan 28, 2003 at 11:43:00PM -0800, Peter Wemm wrote: > "Jacques A. Vidrine" wrote: > > More completely: Kerberos 5 users who want support for the Kerberos > > 5 cipher suites in SSL/TLS (RFC 2712) must use OpenSSL 0.9.7 from the > > ports tree, along with MIT Kerberos 5. > > > > This shouldn't mean much to anyone, since previously there has never > > been support for RFC 2712 in the versions of OpenSSL included with > > FreeBSD. > > Well, there is an ever so slight problem on the freebsd.org cluster: > > Jan 28 23:39:40 panther sshd[76989]: in openpam_load_module(): no pam_krb5.so found > Jan 28 23:39:40 panther sshd[76989]: fatal: PAM: initialisation failed > > But not being able to log in probably doesn't mean much to anyone. > > :-( I doubt seriously this has anything at all to do with this commit or topic (OPENSSL_NO_KRB5 / RFC 2712). Was the whole world rebuilt? Despite the fact that going from `0.9.6' to `0.9.7' does not `sound' like a big change, OpenSSL 0.9.7 has binary incompatibilities with previous versions. Thus the bump in the installed libraries (libcrypto.so.3, libssl.so.3). If some parts of the base system were not rebuilt, there may be problems (e.g. sshd linking to 0.9.7/libcrypto.so.3, but pam_krb5.so having been built against 0.9.6). Cheers, -- Jacques A. Vidrine <nectar@celabo.org> http://www.celabo.org/ NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos jvidrine@verio.net . nectar@FreeBSD.org . nectar@kth.se To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030129130312.GA17951>