OpenSSH and Solaris with 0.9.6x openssl

[Will Partain]

Scott Burch <somar at tiny.net> writes:

> I do a make install for openssh it fails to generate public/private dsa
> keys..in fact ssh_keygen has a bus error when trying to do DSA
> operations. I know other people have had this problem, because I've seen
> similar messages in the mailing list. Unfortunately it appears that
> noone has a solution...

I was one of those people, and I think I'm out of the
woods...  I think there was more than one (bad) thing going
on, and I cannot explain all of them...  Anyway, I'm cookin'
with:

   sparc-solaris2.6 (reasonably well patched)
   openssl 0.9.6b (had problems with anything earlier)
   openssh 2.9p2 (I don't *think* the configure options matter)
   gcc 3.0 (not sure that this matters)
   zlib 1.1.3

The problem that was *killing* me was: I compile openssl
(and everything else) in directories-other-than-the-source,
using the olde fashioned "symlink farm" method.  HOWEVER,
openssl has a couple of strategically-placed symlinks
itself, and if you do symlinks-to-those-symlinks, you *will*
hose yourself.  I therefore run the bit of code below
in the directory where I plan to build, *just before* I run
./Configure.

Hope this is of some use,

Will

=====================================================
FIND=/usr/bin/find
XARGS=/usr/bin/xargs

# There are potentially several versions of .../opensslconf.h
# floating about, and it is VERY important that we get rid of
# any potentially bogus ones and end up with only the right ones.
# So: make sure there are *none* in the original source,
# the src linkfarm or here:
$FIND ../openssl-* ../src . -name opensslconf.h -print | $XARGS  /bin/rm -f

# The include directory one is supposed to link to the
# crypto/ dir one:
$LN -s ../../crypto/opensslconf.h include/openssl/opensslconf.h

# The default stuff writes new versions of these without /bin/rm'ing
# them first; very naughty; so we help:
$FIND ../openssl-* ../src -name Makefile.save -print | $XARGS /bin/rm -f
/bin/rm -f Makefile.ssl