From owner-freebsd-hackers Wed Mar 5 17:25: 2 2003 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3755A37B401; Wed, 5 Mar 2003 17:25:01 -0800 (PST) Received: from geekpunk.net (adsl-32-214-221.bna.bellsouth.net [67.32.214.221]) by mx1.FreeBSD.org (Postfix) with ESMTP id B3F8343FCB; Wed, 5 Mar 2003 17:24:57 -0800 (PST) (envelope-from bandix@geekpunk.net) Received: from localhost.my.domain (taran [127.0.0.1]) by geekpunk.net (8.12.6/8.12.6) with ESMTP id h25NBF4S002506; Wed, 5 Mar 2003 17:11:15 -0600 (CST) (envelope-from bandix@geekpunk.net) Received: (from bandix@localhost) by localhost.my.domain (8.12.6/8.12.6/Submit) id h25NBEta002505; Wed, 5 Mar 2003 17:11:14 -0600 (CST) (envelope-from bandix) Date: Wed, 5 Mar 2003 17:11:14 -0600 From: "Brandon D. Valentine" To: "Jacques A. Vidrine" Cc: Julian Elischer , hackers@FreeBSD.org Subject: Re: ssh/ssl linkage Message-ID: <20030305231114.GJ815@geekpunk.net> References: <20030305224747.GA71781@madman.celabo.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030305224747.GA71781@madman.celabo.org> User-Agent: Mutt/1.4i Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Mar 05, 2003 at 04:47:47PM -0600, Jacques A. Vidrine wrote: > > You are wrong, but it's not your fault :-) OpenSSH specifically > checks the version of OpenSSL which it finds at runtime, and if it > does not match the version it found at build-time, then it barfs > with > "OpenSSL version mismatch. Built against FOO, you have BAR" > > The OpenSSH guys don't trust that the semantics of the API stay the > same across releases, even if the ABI stays the same. I guess I > cannot blame them for this extra paranoia. I don't blame them either, but I don't think it's quite paranoia. It's rather more like prudent skepticism. OpenSSL's convoluted build system is alone more than enough to make one doubt the integrity of the releases. ;-) Brandon D. Valentine -- brandon@dvalentine.com http://www.geekpunk.net Pseudo-Random Googlism: nashville is also the home of ingram industries To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message