Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : openssl + openssh

[aquos]

Hello all,

I installed openssl version 0.9.7 over 0.9.6 and then when I tried to install/update openssh (./configure) I've got this error:

.
.
.
checking OpenSSL header version... 90700f (OpenSSL 0.9.7 31 Dec 2002)
checking OpenSSL library version... 90602f (OpenSSL 0.9.6b [engine] 9 Jul 2001)
checking whether OpenSSL's headers match the library... no
configure error: Your OpenSSL headers do not match your library

If you know how to overcome this problem, please advise.
Thank you so much.

-A

[Mdot]

do this (probably unsafe for newbie to do so):

rpm -e --nodeps `rpm -qa|grep openssl`
install openssl (./config --prefix=/usr && make && make install)
then install openssh (useradd sshd && ./configure --prefix=/usr --sysconfdir=/etc/ssh && make && make install)
then restart sshd, but open telnet before you do so, so you make sure if sshd won't start you still can connect to the server and fix sshd.

good luck

[i am a]

are you on a redhat 7.x server? if so and the build of 0.9.6b is 28 that should be secure. so you may not want to go through the hassle of updating everything, but ya, be weary of the ol --nodeps....

[silversurfer]

I believe 0.9.6g has some important bugfixes

[aquos]

I have already upgraded it. What can I do now?

Miha, did you do that before?

[silversurfer]

A bit out of topic. But somewhat related, I wanted to install Curl 7.10.2 and the latest openssl. After installing Openssl, I get an error when I try to install the latest Curl. Anyone know what am I missing?

The error goes something like UI_Openssl not found.

[Mdot]

Originally posted by aquos
I have already upgraded it. What can I do now?

Miha, did you do that before?

of course I have done it before. Follow the steps I described and you won't have any problems. Don't forget to open telnet in case openssh won't start. The steps are simple:

1) Delete old openssl(-devel)
2) Get new openssl and install it
3) Get new openssh and install it (suggested prefix is /usr; suggested sysconfdir is /etc/ssh)
4) killall -HUP sshd
5) Close telnet back if everything is fine

that's all.

[Mdot]

also once you have done what I described you will need to compile all software that is using openssl's shared libs.
known server software recommended to recompile -
* BIND
* Curl
* Sendmail (or other MTA)
and basically that's it.

Miha.