From owner-freebsd-stable Sat Jul 29 8:25:33 2000 Delivered-To: freebsd-stable@freebsd.org Received: from zibbi.mikom.csir.co.za (zibbi.mikom.csir.co.za [146.64.24.58]) by hub.freebsd.org (Postfix) with ESMTP id 19E9037B6BC for ; Sat, 29 Jul 2000 08:25:28 -0700 (PDT) (envelope-from jhay@zibbi.mikom.csir.co.za) Received: (from jhay@localhost) by zibbi.mikom.csir.co.za (8.10.1/8.10.1) id e6TFPAN85938; Sat, 29 Jul 2000 17:25:10 +0200 (SAT) From: John Hay Message-Id: <200007291525.e6TFPAN85938@zibbi.mikom.csir.co.za> Subject: Re: SSH in 4.1 RELEASE for NonUS users In-Reply-To: <4.3.2.7.2.20000729172836.00b18c60@briz.net> from Mike at "Jul 29, 2000 05:37:15 pm" To: Mike@perlguru.com (Mike) Date: Sat, 29 Jul 2000 17:25:10 +0200 (SAT) Cc: freebsd-stable@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Since installing 4.1-RELEASE from my local Australian mirror and trying to > connect using SSH, > I get this message at the console:- > > Jul 29 17:26:09 gateway sshd[1239]: ** RSAPrivateDecrypt: Unable to find an > RSAREF shared library (librsaref.so). Install the > /usr/ports/security/rsaref port or package and run this program again. See > the OpenSSL chapter in the FreeBSD Handbook, located at > http://www.freebsd.org/handbook/openssl.html, for more information. > Jul 29 17:26:09 gateway sshd[1239]: fatal: rsa_private_decrypt() failed > > I've read large volumes of man pages/forums/mailing lists and I still can't > figure out what is going wrong. I tried installing the OpenSSH 2.1.1 port > and that gives the same response. > > I also installed the crypto distribution using sysinstall and recompiled my > kernel to no avail. > > Can anyone point me in a useful direction towards getting sshd functioning? > You have 2 options. If you have the crypto distribution with source, you can go into /usr/src/secure/lib/librsaintl and build and install it. If you don't want to build it, you can install the crypto distribution from ftp.internat.freebsd.org, its crypto distibution was built with USA_RESIDENT=NO and should give you librsaINTL* which is what is needed. John -- John Hay -- John.Hay@icomtek.csir.co.za To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message