From owner-freebsd-security Tue Jul 30 12:16:49 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EBB5837B400 for ; Tue, 30 Jul 2002 12:16:42 -0700 (PDT) Received: from va.cs.wm.edu (va.cs.wm.edu [128.239.2.31]) by mx1.FreeBSD.org (Postfix) with ESMTP id D1DDC43E31 for ; Tue, 30 Jul 2002 12:16:41 -0700 (PDT) (envelope-from zvezdan@CS.WM.EDU) Received: from corona.cs.wm.edu (corona [128.239.2.50]) by va.cs.wm.edu (8.11.4/8.9.1) with ESMTP id g6UJEMN13588 for ; Tue, 30 Jul 2002 15:14:22 -0400 (EDT) Received: (from zvezdan@localhost) by corona.cs.wm.edu (8.11.6/8.9.1) id g6UJGeJ31562 for freebsd-security@FreeBSD.ORG; Tue, 30 Jul 2002 15:16:40 -0400 Date: Tue, 30 Jul 2002 15:16:40 -0400 From: Zvezdan Petkovic To: freebsd-security@FreeBSD.ORG Subject: Re: OpenSSH not using libssl? Message-ID: <20020730151640.A31553@corona.cs.wm.edu> Mail-Followup-To: freebsd-security@FreeBSD.ORG References: <121122473609.20020730210032@buz.ch> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <121122473609.20020730210032@buz.ch>; from gaml@buz.ch on Tue, Jul 30, 2002 at 09:00:32PM +0200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, Jul 30, 2002 at 09:00:32PM +0200, Gabriel Ambuehl wrote: > Hi, > I'm somewhat confused now. I wanted to install the openssl port which > worked out fine and tried to figure out what I need to do to get > openssh (which makes the whole thing a disaster) to use the new lib so > I went on and did: > # ldd /usr/sbin/sshd > /usr/sbin/sshd: > libopie.so.2 => /usr/lib/libopie.so.2 (0x28086000) > libmd.so.2 => /usr/lib/libmd.so.2 (0x2808f000) > libssh.so.2 => /usr/lib/libssh.so.2 (0x28098000) > libcrypt.so.2 => /usr/lib/libcrypt.so.2 (0x280c9000) See this line? >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> > libcrypto.so.2 => /usr/lib/libcrypto.so.2 (0x280e2000) >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> This is OpenSSL library! > libutil.so.3 => /usr/lib/libutil.so.3 (0x28199000) > libz.so.2 => /usr/lib/libz.so.2 (0x281a2000) > libwrap.so.3 => /usr/lib/libwrap.so.3 (0x281af000) > libpam.so.1 => /usr/lib/libpam.so.1 (0x281b7000) > libc.so.4 => /usr/lib/libc.so.4 (0x281c1000) > > Now what's up here? Isn't OpenSSH based on OpenSSL? If so, why doesn't > libssl show up (with stunnel, for one, it does, BTW stunnel will > automatically use /usr/local/lib/libssl upon a recompile)? Guess I > better wait until the CVS contains a fix for the base tree... > -- Zvezdan Petkovic http://www.cs.wm.edu/~zvezdan/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message