OpenSSH_2.5.1p1 - RH 6.2
Jim Knoble
jmknoble at jmknoble.cx
Tue Feb 27 09:19:40 EST 2001
Circa 2001-Feb-27 08:37:32 +1100 dixit Damien Miller:
: On Tue, 27 Feb 2001, Damien Miller wrote:
: > How about we put something like:
: >
: > if (SSLeay() != OPENSSL_VERSION_NUMBER)
: > fatal("OpenSSL version mismatch. Built against %x, you have %x",
: > OPENSSL_VERSION_NUMBER, SSLeay());
: >
: > at the start of every executable to kill this thing once and for all.
:
: I might put this in init_rng() so we get it without any more disruption.
I'd rather see a warning rather than a fatal error. This allows folks
to use a hypothetical upwardly-compatible OpenSSL (if there ever is
one) in the future without having to recompile the server.
--
jim knoble | jmknoble at jmknoble.cx | http://www.jmknoble.cx/
More information about the openssh-unix-dev
mailing list