summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--INSTALL19
1 files changed, 10 insertions, 9 deletions
diff --git a/INSTALL b/INSTALL
index 814768791..c598fe511 100644
--- a/INSTALL
+++ b/INSTALL
@@ -7,13 +7,20 @@ options. Some notes about specific compilers:
7 - clang: -ftrapv and -sanitize=integer require the compiler-rt runtime 7 - clang: -ftrapv and -sanitize=integer require the compiler-rt runtime
8 (CC=clang LDFLAGS=--rtlib=compiler-rt ./configure) 8 (CC=clang LDFLAGS=--rtlib=compiler-rt ./configure)
9 9
10You will need working installations of Zlib and libcrypto (LibreSSL / 10You will need a working installation of zlib:
11OpenSSL)
12 11
13Zlib 1.1.4 or 1.2.1.2 or greater (earlier 1.2.x versions have problems): 12Zlib 1.1.4 or 1.2.1.2 or greater (earlier 1.2.x versions have problems):
14http://www.gzip.org/zlib/ 13http://www.gzip.org/zlib/
15 14
16libcrypto from either of: 15To support Privilege Separation (which is now required) you will need
16to create the user, group and directory used by sshd for privilege
17separation. See README.privsep for details.
18
19
20The remaining items are optional.
21
22libcrypto from either of LibreSSL or OpenSSL. Building without libcrypto
23is supported but severely restricts the avilable ciphers and algorithms.
17 - LibreSSL (https://www.libressl.org/) 24 - LibreSSL (https://www.libressl.org/)
18 - OpenSSL (https://www.openssl.org) with any of the following versions: 25 - OpenSSL (https://www.openssl.org) with any of the following versions:
19 - 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g or any 1.1.1 26 - 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g or any 1.1.1
@@ -24,12 +31,6 @@ If you must use a non-position-independent libcrypto, then you may need
24to configure OpenSSH --without-pie. Note that due to a bug in EVP_CipherInit 31to configure OpenSSH --without-pie. Note that due to a bug in EVP_CipherInit
25OpenSSL 1.1 versions prior to 1.1.0g can't be used. 32OpenSSL 1.1 versions prior to 1.1.0g can't be used.
26 33
27To support Privilege Separation (which is now required) you will need
28to create the user, group and directory used by sshd for privilege
29separation. See README.privsep for details.
30
31The remaining items are optional.
32
33NB. If you operating system supports /dev/random, you should configure 34NB. If you operating system supports /dev/random, you should configure
34libcrypto (LibreSSL/OpenSSL) to use it. OpenSSH relies on libcrypto's 35libcrypto (LibreSSL/OpenSSL) to use it. OpenSSH relies on libcrypto's
35direct support of /dev/random, or failing that, either prngd or egd. 36direct support of /dev/random, or failing that, either prngd or egd.