Re: OpenSSH not using libssl?

From: Michael Nottebrock (michaelnottebrock@gmx.net)
Date: 07/30/02 

Date: Tue, 30 Jul 2002 21:24:29 +0200
From: Michael Nottebrock <michaelnottebrock@gmx.net>

Gabriel Ambuehl wrote:
> Hi,
> I'm somewhat confused now. I wanted to install the openssl port which
> worked out fine and tried to figure out what I need to do to get
> openssh (which makes the whole thing a disaster) to use the new lib so
> I went on and did:
> # ldd /usr/sbin/sshd
> /usr/sbin/sshd:
> libopie.so.2 => /usr/lib/libopie.so.2 (0x28086000)
> libmd.so.2 => /usr/lib/libmd.so.2 (0x2808f000)
> libssh.so.2 => /usr/lib/libssh.so.2 (0x28098000)
> libcrypt.so.2 => /usr/lib/libcrypt.so.2 (0x280c9000)
> libcrypto.so.2 => /usr/lib/libcrypto.so.2 (0x280e2000)
> libutil.so.3 => /usr/lib/libutil.so.3 (0x28199000)
> libz.so.2 => /usr/lib/libz.so.2 (0x281a2000)
> libwrap.so.3 => /usr/lib/libwrap.so.3 (0x281af000)
> libpam.so.1 => /usr/lib/libpam.so.1 (0x281b7000)
> libc.so.4 => /usr/lib/libc.so.4 (0x281c1000)
>
> Now what's up here? Isn't OpenSSH based on OpenSSL?

It uses libcrypto, but it shouldn't be vulnerable. 

-- 
Michael Nottebrock
"The circumstance ends uglily in the cruel result." - Babelfish

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • SUMMARY: incomplete openssl build
    ... Thanks for all the responses. ... Supposedly, after gcc 2.95.x, shared libraries are ... I used the build for openssl ... I'm using a pdf guide I downloaded from the web to install openssh on my ...
    (SunManagers)
  • Re: Something Not going with my LDAP using SSL
    ... Okay Brian, having installed with apt-get source libldap-ruby1.8, openssl, and ... Okay great. ... how did you install ruby-ldap? ...
    (comp.lang.ruby)
  • Re: Something Not going with my LDAP using SSL
    ... Okay Brian, having installed with apt-get source libldap-ruby1.8, ... openssl, and libopenssl-ruby1.8, I am now in a quandry in two ways: ... how did you install ruby-ldap? ...
    (comp.lang.ruby)
  • Re: Should I have 2 copies of OpenSSL?
    ... you have the most recent version of openssl ... installed in base due to the upgrade to 6.0 - release. ... install of OpenSSL and not to install OpenSSL as a dependency from ports. ...
    (freebsd-questions)
  • broken openssl on freebsd60
    ... I've been trying to install a new server using the openssl port and keep ... postgresql81 or postgresql80+postgis ... bobby# make install ...
    (freebsd-questions)