Incompatibility of configure with recent OpenSSL versions

Bob Rasmussen ras at anzio.com
Thu Oct 30 11:29:56 EST 2014


I agree, it doesn't look like it should match.

Is the conftest.c file left behind somewhere?

Below is the relevant section (I think) of the log file.  Perhaps the 
compile warning is a clue.

configure:11850: checking OpenSSL library version
configure:11889: gcc -o conftest -g -O2 -Wall -Wpointer-arith 
-Wuninitialized -W
sign-compare -Wformat-security -Wno-pointer-sign -fno-strict-aliasing 
-D_FORTIFY
_SOURCE=2 -ftrapv -fno-builtin-memset -fstack-protector-all -std=gnu99 
-fPIE   -
Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -fstack-protector-all -pie 
conftest.c
-lcrypto -lrt -ldl -lutil -lz -lnsl  >&5
conftest.c: In function 'main':
conftest.c:226: warning: format '%08x' expects type 'unsigned int', but 
argument
  4 has type 'long unsigned int'
configure:11889: $? = 0
configure:11889: ./conftest
configure:11889: $? = 0
configure:11895: error: OpenSSL >= 0.9.8f required

On Thu, 30 Oct 2014, Damien Miller wrote:

> On Wed, 29 Oct 2014, Bob Rasmussen wrote:
>
>> I am attempting to build OpenSSH on a Linux box. In running ./configure, when
>> it tests for OpenSSL compatibility, I get the following:
>>
>> checking OpenSSL header version... 009081cf (OpenSSL 0.9.8zc 15 Oct 2014)
>> checking OpenSSL library version... configure: error: OpenSSL >= 0.9.8f
>> required
>>
>> It would appear that 0.9.8zc is in fact >= 0.9.8f. I believe there is a
>> problem in how the 009081cf is parsed.
>
> I'm surprised it matched - the test is:
>
>                # Check version is supported.
>                case "$ssl_library_ver" in
>                        0090[[0-7]]*|009080[[0-5]]*)
>                                AC_MSG_ERROR([OpenSSL >= 0.9.8f required])
>                                ;;
>                        *) ;;
>                esac
>
> Are you sure your library matches your header? You can see what configure
> found by looking at the 'result' line in config.log that follows
> 'checking OpenSSL library version'.
>
> I've altered the error message to include the actual version found.
>
> -d
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
>

Regards,
....Bob Rasmussen,   President,   Rasmussen Software, Inc.

personal e-mail: ras at anzio.com
  company e-mail: rsi at anzio.com
           voice: (US) 503-624-0360 (9:00-6:00 Pacific Time)
             fax: (US) 503-624-0760
             web: http://www.anzio.com
  street address: Rasmussen Software, Inc.
                  10240 SW Nimbus, Suite L9
                  Portland, OR  97223  USA


More information about the openssh-unix-dev mailing list