OpenSSH_2.5.1p1 - RH 6.2

Jim Knoble jmknoble at jmknoble.cx
Tue Feb 27 09:19:40 EST 2001


Circa 2001-Feb-27 08:37:32 +1100 dixit Damien Miller:

: On Tue, 27 Feb 2001, Damien Miller wrote:
: > How about we put something like:
: >
: > if (SSLeay() != OPENSSL_VERSION_NUMBER)
: > 	fatal("OpenSSL version mismatch. Built against %x, you have %x",
: > 	    OPENSSL_VERSION_NUMBER, SSLeay());
: >
: > at the start of every executable to kill this thing once and for all.
: 
: I might put this in init_rng() so we get it without any more disruption.

I'd rather see a warning rather than a fatal error.  This allows folks
to use a hypothetical upwardly-compatible OpenSSL (if there ever is
one) in the future without having to recompile the server.

-- 
jim knoble | jmknoble at jmknoble.cx | http://www.jmknoble.cx/





More information about the openssh-unix-dev mailing list