Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Apr 2025 23:56:03 +0100
From:      Jessica Clarke <jrtc27@freebsd.org>
To:        Shawn Webb <shawn.webb@hardenedbsd.org>
Cc:        John Baldwin <jhb@freebsd.org>, src-committers@freebsd.org, dev-commits-src-all@freebsd.org, dev-commits-src-main@freebsd.org
Subject:   Re: git: a098111a28ed - main - secure: Add ssh-sk-client to all consumers of libssh
Message-ID:  <A78D317E-914E-4F6B-AFA4-438D4B50FEA8@freebsd.org>
In-Reply-To: <kwr5lq63fzct3dkyi5c3x6s7v5mdu3e47tfci7c43fw27fvljv@x4p5zr6s4auf>
References:  <202504220207.53M27okn077850@gitrepo.freebsd.org> <kwr5lq63fzct3dkyi5c3x6s7v5mdu3e47tfci7c43fw27fvljv@x4p5zr6s4auf>

next in thread | previous in thread | raw e-mail | index | archive | help
On 24 Apr 2025, at 23:45, Shawn Webb <shawn.webb@hardenedbsd.org> wrote:
> On Tue, Apr 22, 2025 at 02:07:50AM +0000, John Baldwin wrote:
>> The branch main has been updated by jhb:
>>=20
>> URL: =
https://cgit.FreeBSD.org/src/commit/?id=3Da098111a28ed59e1ab1101ad09913f02=
35ebd28f
>>=20
>> commit a098111a28ed59e1ab1101ad09913f0235ebd28f
>> Author:     John Baldwin <jhb@FreeBSD.org>
>> AuthorDate: 2025-04-22 02:05:28 +0000
>> Commit:     John Baldwin <jhb@FreeBSD.org>
>> CommitDate: 2025-04-22 02:05:28 +0000
>>=20
>>    secure: Add ssh-sk-client to all consumers of libssh
>>=20
>>    These all failed to link with ld.bfd used by GCC due to
>>    Fssh_sshsk_sign being an unresolved symbol.
>>=20
>>    Fixes:          65d8491719bb ("secure: Adapt Makefile to =
ssh-sk-client everywhere")
>=20
> Hey John,
>=20
> I'm getting the following error from the RTLD when the rc scripts
> start sshd:
>=20
> =3D=3D=3D=3D BEGIN LOG =3D=3D=3D=3D
> ld-elf.so.1: /usr/lib/libprivatessh.so.5: Undefined symbol =
"Fssh_sshsk_sign
> =3D=3D=3D=3D END LOG =3D=3D=3D=3D
>=20
> This is on HardenedBSD 15-CURRENT/amd64. I'll try to reproduce next
> week with vanilla FreeBSD, unless someone else beats me to it.

I don=E2=80=99t understand how this is meant to work. sshsk_sign is used =
by
sshkey.c, which is in libssh, so why are we putting the definition of
sshsk_sign (namespaced) in each and every program?

Jess




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?A78D317E-914E-4F6B-AFA4-438D4B50FEA8>