Call for testing: OpenSSH 7.6

[Phil Pennock]

On 2017-09-24 at 17:37 -0700, Kevin Brott wrote:
> On 09/20/2017 05:47 PM, Damien Miller wrote:
> > Hi,
> > 
> > OpenSSH 7.6p1 is almost ready for release, so we would appreciate testing
> > on as many platforms and systems as possible. This is a bugfix release.
> 
> openssh-SNAP-20170925.tar.gz && git clone as of 2017/09/24 @ 17:20 PDT
> 
> OpSys           Compiler   OpenSSL     Build     Test
> Debian 8.9    gcc 4.9.2    1.0.1t        YES        all tests passed
> Debian 9.1    gcc 6.3.0    1.1.0f        NO *1
> 
> Looks like the default openssl version on Debian 9 is 1.1.0f, which according to the INSTALL doc is a deal-breaker (LibreSSL or OpenSSL >= 0.9.8f < 1.1.0).

Debian 9.1 is one of the ones I tested on and it worked, so I looked
into this: it looks like Debian 9.1 has libssl installed for both 1.0.2l
and 1.1.0f, but then the openssl package for the latter, providing only
the command-line interface.

  https://people.spodhuis.org/phil.pennock/openssh-testing/SNAP-20170925/bento-debian9.1.txt

A plain install of Debian includes neither set of dev headers, the
"apt-get build-dep openssh" step installed "libssl1.0-dev".  The plain
install I got included both binary-library packages by default.

"libssl1.0-dev" and "libssl-dev" have mutual Conflicts: declarations so
installing one should auto-remove the other.

-----------------------------8< cut here >8-----------------------------
vagrant at debian-9:~$ dpkg -l \*openssl\* libssl\*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                         Version             Architecture        Description
+++-============================-===================-===================-==============================================================
un  libssl-dev                   <none>              <none>              (no description available)
ii  libssl1.0-dev:amd64          1.0.2l-2            amd64               Secure Sockets Layer toolkit - development files
ii  libssl1.0.2:amd64            1.0.2l-2            amd64               Secure Sockets Layer toolkit - shared libraries
ii  libssl1.1:amd64              1.1.0f-3            amd64               Secure Sockets Layer toolkit - shared libraries
ii  openssl                      1.1.0f-3            amd64               Secure Sockets Layer toolkit - cryptographic utility
un  python3-openssl              <none>              <none>              (no description available)
-----------------------------8< cut here >8-----------------------------

-Phil