openssh 6.5p1 configure and ssl location/shared

Damien Miller djm at mindrot.org
Mon Feb 10 11:22:19 EST 2014


On Sun, 9 Feb 2014, Karl Berry wrote:

> This happened because the -Wl,-z,relro option is now being included by
> default.  This is on CentOS 6.5, x86_64, though I suppose any
> GNU ld that supports the option would induce the same error given the
> lack of shared libraries.

I think it's probably more likely to do with the -fPIE option - this
requires that the libraries linked be position independent too.

> I ran configure --without-hardening to work around that problem.  Then
> it all went through.

I'd recommend rebuilding OpenSSL with -fPIC instead, there are many
security benefits to the hardening options we enable.

-d


More information about the openssh-unix-dev mailing list