Call for testing: OpenSSH 9.7

[Darren Tucker]

On Fri, 8 Mar 2024 at 20:26, Dmitry Belyavskiy <dbelyavs at redhat.com> wrote:
> I got a failure on configuring the master branch on Fedora 39:
>
> upstream/openssh-portable$ ./configure --disable-dsa

That should be --disable-dsa-keys

> ....
> checking OpenSSL header version... 30100010 (OpenSSL 3.1.1 30 May 2023)
> checking for OpenSSL_version... yes
> checking for OpenSSL_version_num... yes
> checking OpenSSL library version... configure: error: Unknown/unsupported
> OpenSSL version ("30100010 (OpenSSL 3.1.1 30 May 2023)")

There's no reason that should not should work.  Our github tests
include a version in that series:
https://github.com/openssh/openssh-portable/actions/runs/8185080777/job/22380713906

I am able to build against that exact OpenSSL version:

$ ./configure --with-ssl-dir=/opt/openssl/3.1.1
--with-rpath=-Wl,-rpath, --disable-dsa-keys | grep -i openssl
checking whether OpenSSL will be used for cryptography... yes
checking for openssl... /opt/openssl/3.1.1/bin/openssl
checking for openssl/opensslv.h... yes
checking OpenSSL header version... 30100010 (OpenSSL 3.1.1 30 May 2023)
checking for OpenSSL_version... yes
checking for OpenSSL_version_num... yes
checking OpenSSL library version... 30100010 (OpenSSL 3.1.1 30 May 2023)
checking whether OpenSSL's headers match the library... yes
checking if programs using OpenSSL functions will link... yes
checking for OpenSSL_add_all_algorithms... no
checking whether OpenSSL_add_all_algorithms is declared... yes
[...]
$ make [...]
$ ./ssh -V
OpenSSH_9.6p1, OpenSSL 3.1.1 30 May 2023

You'll probably need to dig into config.log to see exactly why that
configure test fails.  Do you have local mods to either OpenSSH or
OpenSSL?

-- 
Darren Tucker (dtucker at dtucker.net)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.