summaryrefslogtreecommitdiff
path: root/INSTALL
diff options
context:
space:
mode:
authorDarren Tucker <dtucker@dtucker.net>2019-05-16 07:53:20 +1000
committerDarren Tucker <dtucker@dtucker.net>2019-05-16 07:53:20 +1000
commitcd16aceec148d55088fc8df6be88335578d85258 (patch)
treead796aacd548d748e8b861f78a6bc9d0fa89abf6 /INSTALL
parent6fd4aa2aafbce90acb11a328ca0aa0696cb01c6b (diff)
Add OpenSSL 1.1.1 to the supported list.
Clarify the language around prngd and egd.
Diffstat (limited to 'INSTALL')
-rw-r--r--INSTALL14
1 files changed, 8 insertions, 6 deletions
diff --git a/INSTALL b/INSTALL
index f1f8f00f3..d0fa00e6c 100644
--- a/INSTALL
+++ b/INSTALL
@@ -14,8 +14,9 @@ Zlib 1.1.4 or 1.2.1.2 or greater (earlier 1.2.x versions have problems):
14http://www.gzip.org/zlib/ 14http://www.gzip.org/zlib/
15 15
16libcrypto from either of: 16libcrypto from either of:
17 - LibreSSL (http://www.libressl.org/) 17 - LibreSSL (https://www.libressl.org/)
18 - OpenSSL 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g (http://www.openssl.org/) 18 - OpenSSL (https://www.openssl.org) with any of the following versions:
19 - 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g or any 1.1.1
19 20
20LibreSSL/OpenSSL should be compiled as a position-independent library 21LibreSSL/OpenSSL should be compiled as a position-independent library
21(i.e. with -fPIC) otherwise OpenSSH will not be able to link with it. 22(i.e. with -fPIC) otherwise OpenSSH will not be able to link with it.
@@ -27,19 +28,20 @@ The remaining items are optional.
27 28
28NB. If you operating system supports /dev/random, you should configure 29NB. If you operating system supports /dev/random, you should configure
29libcrypto (LibreSSL/OpenSSL) to use it. OpenSSH relies on libcrypto's 30libcrypto (LibreSSL/OpenSSL) to use it. OpenSSH relies on libcrypto's
30direct support of /dev/random, or failing that, either prngd or egd 31direct support of /dev/random, or failing that, either prngd or egd.
31 32
32PRNGD: 33PRNGD:
33 34
34If your system lacks kernel-based random collection, the use of Lutz 35If your system lacks kernel-based random collection, the use of Lutz
35Jaenicke's PRNGd is recommended. 36Jaenicke's PRNGd is recommended. It requires that libcrypto be configured
37to support it.
36 38
37http://prngd.sourceforge.net/ 39http://prngd.sourceforge.net/
38 40
39EGD: 41EGD:
40 42
41If the kernel lacks /dev/random the Entropy Gathering Daemon (EGD) is 43The Entropy Gathering Daemon (EGD) suppports the same interface as prngd.
42supported only if libcrypto supports it. 44It also supported only if libcrypto is configured to support it.
43 45
44http://egd.sourceforge.net/ 46http://egd.sourceforge.net/
45 47