diff options
author | Darren Tucker <dtucker@dtucker.net> | 2019-12-09 17:23:22 +1100 |
---|---|---|
committer | Darren Tucker <dtucker@dtucker.net> | 2019-12-09 17:23:22 +1100 |
commit | b66fa5da25c4b5b67cf9f0ce7af513f5a6a6a686 (patch) | |
tree | 28160265683ab8a30e151f2e64b4cfb2e3a1a020 | |
parent | fa7924008e838cded7e8a561356ffe5e06e0ed64 (diff) |
Recommend running LibreSSL or OpenSSL self-tests.
-rw-r--r-- | INSTALL | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -31,6 +31,10 @@ If you must use a non-position-independent libcrypto, then you may need | |||
31 | to configure OpenSSH --without-pie. Note that due to a bug in EVP_CipherInit | 31 | to configure OpenSSH --without-pie. Note that due to a bug in EVP_CipherInit |
32 | OpenSSL 1.1 versions prior to 1.1.0g can't be used. | 32 | OpenSSL 1.1 versions prior to 1.1.0g can't be used. |
33 | 33 | ||
34 | If you build either from source, running the OpenSSL self-test ("make | ||
35 | tests") or the LibreSSL equivalent ("make check") and ensuring that all | ||
36 | tests pass is strongly recommended. | ||
37 | |||
34 | NB. If you operating system supports /dev/random, you should configure | 38 | NB. If you operating system supports /dev/random, you should configure |
35 | libcrypto (LibreSSL/OpenSSL) to use it. OpenSSH relies on libcrypto's | 39 | libcrypto (LibreSSL/OpenSSL) to use it. OpenSSH relies on libcrypto's |
36 | direct support of /dev/random, or failing that, either prngd or egd. | 40 | direct support of /dev/random, or failing that, either prngd or egd. |