[openssh-commits] [openssh] 01/04: Remove check for OpenSSL w/out AES192/256.

git+noreply at mindrot.org git+noreply at mindrot.org
Tue Jun 16 21:23:27 AEST 2026


This is an automated email from the git hooks/post-receive script.

dtucker pushed a commit to branch master
in repository openssh.

commit 61ca39c119108e95f94e3d914aa6fd79d99e288d
Author: Darren Tucker <dtucker at dtucker.net>
AuthorDate: Tue Jun 16 18:16:32 2026 +1000

    Remove check for OpenSSL w/out AES192/256.
    
    This was the case for some old Solaris versions, but the support for it
    has long been removed from our compat layer so there's no point checking
    for it.
---
 configure.ac | 20 --------------------
 1 file changed, 20 deletions(-)

diff --git a/configure.ac b/configure.ac
index cba44faf2..5eed06b18 100644
--- a/configure.ac
+++ b/configure.ac
@@ -3265,26 +3265,6 @@ if test "x$openssl" = "xyes" ; then
 		])
 	fi
 
-	# Check for OpenSSL without EVP_aes_{192,256}_cbc
-	AC_MSG_CHECKING([whether OpenSSL lacks support for AES 192/256])
-	AC_LINK_IFELSE(
-		[AC_LANG_PROGRAM([[
-	#include <stdlib.h>
-	#include <string.h>
-	#include <openssl/evp.h>
-		]], [[
-		exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);
-		]])],
-		[
-			AC_MSG_RESULT([no])
-		],
-		[
-			AC_MSG_RESULT([yes])
-			AC_DEFINE([OPENSSL_LOBOTOMISED_AES], [1],
-			    [libcrypto is missing AES 192 and 256 bit functions])
-		]
-	)
-
 	AC_MSG_CHECKING([if EVP_DigestUpdate returns an int])
 	AC_LINK_IFELSE(
 		[AC_LANG_PROGRAM([[

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.


More information about the openssh-commits mailing list