openssh dependency on openssl

Stuart Henderson stu at spacehopper.org
Thu Jun 2 19:04:08 AEST 2016


On 2016-05-31, Ángel González <keisial at gmail.com> wrote:
> On 31/05/16 20:31, Sandeep Umesh wrote:
>> In general, is it possible to have the SSH binaries (which is generated by
>> compiling with a higher version of openssl ) working when a lower version
>> of openssl is installed on the machine ? Thanks
> In general, you should do it the opposite way. Compile with the lowest 
> supported library version, and it will work with an higher one.

That's not reliable - OpenSSL do sometimes break the ABI, even between
different alphabetic versions with the same numeric branch.  Moving between
branches (1.0.1, 1.0.2, etc) you're highly likely to have incompatibilities.

If you're not in control of the installed libraries on a system that you
build binaries for, perhaps statically linking is a better option.
It doesn't need to be openssl either, tried ssh -V on a Mac lately?




More information about the openssh-unix-dev mailing list