bugzilla-daemon | 1 Jan 2003 13:15
Favicon

[Bug 459] ssh-keygen doesn't know how to export private keys

http://bugzilla.mindrot.org/show_bug.cgi?id=459

------- Additional Comments From markus <at> openbsd.org  2003-01-01 23:15 -------
it's still possible to convert a private ssh.com key
to openssh format, but not vice versa. we don't
intend to provide support for migrating waway _from_ openssh

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-unix-dev <at> mindrot.org mailing list
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

bugzilla-daemon | 1 Jan 2003 17:28
Favicon

[Bug 462] New: compile failure with openssl 0.9.7

http://bugzilla.mindrot.org/show_bug.cgi?id=462

           Summary: compile failure with openssl 0.9.7
           Product: Portable OpenSSH
           Version: 3.5p1
          Platform: ix86
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: P2
         Component: Build system
        AssignedTo: openssh-unix-dev <at> mindrot.org
        ReportedBy: madhon <at> madhon.co.uk

on slackware-current with openssl 0.9.7 the build fails to make as follows

make[1]: Entering directory `/tmp/openssh-3.5p1/openbsd-compat'
make[1]: Nothing to be done for `all'.
make[1]: Leaving directory `/tmp/openssh-3.5p1/openbsd-compat'
i386-slackware-linux-gcc -o ssh ssh.o sshconnect.o sshconnect1.o sshconnect2.o 
sshtty.o readconf.o clientloop.o -L. -Lopenbsd-compat/  -lssh -lopenbsd-compat -
lutil -lz -lnsl  -lcrypto -lcrypt
./libssh.a(rsa.o)(.text+0x2a4): In funcion `rsa_generate_additional_parameters'
:
: undefined reference to `BN_mod'
./libssh.a(rsa.o)(.text+0x2a6): In funcion `rsa_generate_additional_parameters'
:
: undefined reference to `BN_mod'
collect2: ld returned 1 exit status
make: *** [ssh[ Error 1
(Continue reading)

bugzilla-daemon | 1 Jan 2003 18:04
Favicon

[Bug 462] compile failure with openssl 0.9.7

http://bugzilla.mindrot.org/show_bug.cgi?id=462

markus <at> openbsd.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

------- Additional Comments From markus <at> openbsd.org  2003-01-02 04:04 -------
i think your openssl header files and libaries are not matching

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-unix-dev <at> mindrot.org mailing list
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

bugzilla-daemon | 1 Jan 2003 20:22
Favicon

[Bug 462] compile failure with openssl 0.9.7

http://bugzilla.mindrot.org/show_bug.cgi?id=462

madhon <at> madhon.co.uk changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|INVALID                     |

------- Additional Comments From madhon <at> madhon.co.uk  2003-01-02 06:22 -------
just removed all traces of openssl, recompiled and installed it, and still the 
same error.

if what you say is true wouldnt it also stop me from compiling anything else 
that uses openssl (apache 2, php, curl, sasl to name just a few that ive 
recompiled using the new openssl fine) 

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-unix-dev <at> mindrot.org mailing list
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

Kevin Steves | 2 Jan 2003 00:42
Picon
Favicon

Re: sshd doesn't log hostname into utmp correctly [resend]

On Tue, Dec 31, 2002 at 12:55:03AM +0900, Hajimu UMEMOTO wrote:
> stevesk> is that the only missing piece?  i thought there was more?
> stevesk> record_utmp_only()?
> 
> Yup, it was the missing piece only for utmp part.  There is still
> missing piece for utmpx part.  Since FreeBSD doesn't have utmpx yet,
> at least it was sufficient for FreeBSD.
> I attached the full missing piece in this mail.

looks good, thank you.  i will commit that.
_______________________________________________
openssh-unix-dev <at> mindrot.org mailing list
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

bugzilla-daemon | 2 Jan 2003 00:47
Favicon

[Bug 462] compile failure with openssl 0.9.7

http://bugzilla.mindrot.org/show_bug.cgi?id=462

------- Additional Comments From dtucker <at> zip.com.au  2003-01-02 10:47 -------
Try running the "findssl.sh" script from http://www.zip.com.au/~dtucker/openssh/ 
to see if there's any libraries or headers you missed.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-unix-dev <at> mindrot.org mailing list
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

Kevin Steves | 2 Jan 2003 01:04
Picon
Favicon

Re: [PATCH] Password expiry with Privsep and PAM

On Tue, Dec 10, 2002 at 11:51:16PM +1100, Darren Tucker wrote:
> 	I used some parts of Michael Steffens' patch (bugid #423) to make it
> work on HP-UX.
>  
> +/* HP-UX doesn't like credentials to be deleted. Skip and rely on pam_end() */
> +#ifndef __hpux
>  	if (__pamh && creds_set) {
>  		pam_retval = pam_setcred(__pamh, PAM_DELETE_CRED);
>  		if (pam_retval != PAM_SUCCESS)
>  			debug("Cannot delete credentials[%d]: %.200s", 
>  			    pam_retval, PAM_STRERROR(__pamh, pam_retval));
>  	}
> +#endif

this is a long-standing and for the most part non-issue that also
effects certain Solaris PAM versions (HP PAM started with a Sun
codebase).  a search of the archives will show a lot of discussion.

however, we don't need to #ifndef __hpux, as that's just a debug, and
it shouldn't make anything not work.
_______________________________________________
openssh-unix-dev <at> mindrot.org mailing list
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

bugzilla-daemon | 2 Jan 2003 01:53
Favicon

[Bug 423] Workaround for pw change in privsep mode (3.5.p1)

http://bugzilla.mindrot.org/show_bug.cgi?id=423

------- Additional Comments From stevesk <at> pobox.com  2003-01-02 11:52 -------
regarding log() clash, shouldn't the HP libsec log() be
static or renamed or ?

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-unix-dev <at> mindrot.org mailing list
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

bugzilla-daemon | 2 Jan 2003 01:58
Favicon

[Bug 459] ssh-keygen doesn't know how to export private keys

http://bugzilla.mindrot.org/show_bug.cgi?id=459

djm <at> mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

------- Additional Comments From djm <at> mindrot.org  2003-01-02 11:58 -------
That being said - OpenSSH's protocol 2 keys are in a standard PEM format which
you can dump out using "openssl rsa -noout -text -in .ssh/id_rsa"

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-unix-dev <at> mindrot.org mailing list
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

Kevin Steves | 2 Jan 2003 02:56
Picon
Favicon

Re: [PATCH] PAM chauthtok + Privsep

On Sat, Dec 21, 2002 at 11:11:04PM +1100, Darren Tucker wrote:
> Index: session.c
> ===================================================================
> RCS file: /cvs/openssh/session.c,v
> retrieving revision 1.222
> diff -u -r1.222 session.c
> --- session.c	26 Sep 2002 00:38:50 -0000	1.222
> +++ session.c	21 Dec 2002 11:39:07 -0000
>  <at>  <at>  -454,7 +454,6  <at>  <at> 
>  	session_proctitle(s);
>  
>  #if defined(USE_PAM)
> -	do_pam_session(s->pw->pw_name, NULL);
>  	do_pam_setcred(1);
>  	if (is_pam_password_change_required())
>  		packet_disconnect("Password change required but no "

>  	if (check_quietlogin(s, command))
>  		return;
>  <at>  <at>  -1238,6 +1242,12  <at>  <at> 
>  		 * Reestablish them here.
>  		 */
>  		do_pam_setcred(0);
> +
> +		/*
> +		 * We need to open the session here because PAM on HP-UX does not
> +		 * work after the call to permanently_set_uid.
> +		 */
> +		do_pam_session(pw->pw_name,NULL);
>  # endif /* USE_PAM */
(Continue reading)


Gmane