Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Mar 2003 17:11:14 -0600
From:      "Brandon D. Valentine" <brandon@dvalentine.com>
To:        "Jacques A. Vidrine" <nectar@FreeBSD.org>
Cc:        Julian Elischer <julian@elischer.org>, hackers@FreeBSD.org
Subject:   Re: ssh/ssl linkage
Message-ID:  <20030305231114.GJ815@geekpunk.net>
In-Reply-To: <20030305224747.GA71781@madman.celabo.org>
References:  <Pine.BSF.4.21.0303051350510.61509-100000@InterJet.elischer.org> <Pine.BSF.4.21.0303051408280.61509-100000@InterJet.elischer.org> <Pine.BSF.4.21.0303051350510.61509-100000@InterJet.elischer.org> <20030305224747.GA71781@madman.celabo.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Mar 05, 2003 at 04:47:47PM -0600, Jacques A. Vidrine wrote:
> 
> You are wrong, but it's not your fault :-)  OpenSSH specifically
> checks the version of OpenSSL which it finds at runtime, and if it
> does not match the version it found at build-time, then it barfs
> with
>   "OpenSSL version mismatch. Built against FOO, you have BAR"
> 
> The OpenSSH guys don't trust that the semantics of the API stay the
> same across releases, even if the ABI stays the same.  I guess I
> cannot blame them for this extra paranoia.

I don't blame them either, but I don't think it's quite paranoia.  It's
rather more like prudent skepticism.  OpenSSL's convoluted build system
is alone more than enough to make one doubt the integrity of the
releases.  ;-)

Brandon D. Valentine
-- 
brandon@dvalentine.com                                 http://www.geekpunk.net
Pseudo-Random Googlism:  nashville is also the home of ingram industries

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030305231114.GJ815>