missing HAVE_EVP_RIPEMD160 breaks ssh client

Petr Lautrbach plautrba at redhat.com
Wed Jul 16 01:21:01 EST 2014


On 07/15/2014 05:00 PM, Petr Lautrbach wrote:
> Hello,
> 
> --- a/digest.h
> +++ b/digest.h
> @@ -22,13 +22,17 @@
>  #define SSH_DIGEST_MAX_LENGTH  64
> 
>  /* Digest algorithms */
> -#define SSH_DIGEST_MD5         0
> -#define SSH_DIGEST_RIPEMD160   1
> -#define SSH_DIGEST_SHA1                2
> -#define SSH_DIGEST_SHA256      3
> -#define SSH_DIGEST_SHA384      4
> -#define SSH_DIGEST_SHA512      5
> -#define SSH_DIGEST_MAX         6
> +enum ssh_digest_type {
> +       SSH_DIGEST_MD5,
> +#ifdef HAVE_EVP_RIPEMD160 /* XXX replace with local if missing */
> +       SSH_DIGEST_RIPEMD160,
> +#endif
> +       SSH_DIGEST_SHA1,
> +       SSH_DIGEST_SHA256,
> +       SSH_DIGEST_SHA384,
> +       SSH_DIGEST_SHA512,
> +       SSH_DIGEST_MAX
> +};
> 

Hmm, it would break the implementation in digest-libc.c so probably not the right fix.



Petr

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20140715/86fd44ac/attachment.bin>


More information about the openssh-unix-dev mailing list