summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--INSTALL11
1 files changed, 7 insertions, 4 deletions
diff --git a/INSTALL b/INSTALL
index 5057dc287..9754e2179 100644
--- a/INSTALL
+++ b/INSTALL
@@ -25,11 +25,14 @@ is supported but severely restricts the avilable ciphers and algorithms.
25 - OpenSSL (https://www.openssl.org) with any of the following versions: 25 - OpenSSL (https://www.openssl.org) with any of the following versions:
26 - 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g or any 1.1.1 26 - 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g or any 1.1.1
27 27
28Note that due to a bug in EVP_CipherInit OpenSSL 1.1 versions prior to
291.1.0g can't be used.
30
28LibreSSL/OpenSSL should be compiled as a position-independent library 31LibreSSL/OpenSSL should be compiled as a position-independent library
29(i.e. with -fPIC) otherwise OpenSSH will not be able to link with it. 32(i.e. -fPIC, eg by configuring OpenSSL as "./config [options] -fPIC"
30If you must use a non-position-independent libcrypto, then you may need 33or LibreSSL as "CFLAGS=-fPIC ./configure") otherwise OpenSSH will not
31to configure OpenSSH --without-pie. Note that due to a bug in EVP_CipherInit 34be able to link with it. If you must use a non-position-independent
32OpenSSL 1.1 versions prior to 1.1.0g can't be used. 35libcrypto, then you may need to configure OpenSSH --without-pie.
33 36
34If you build either from source, running the OpenSSL self-test ("make 37If you build either from source, running the OpenSSL self-test ("make
35tests") or the LibreSSL equivalent ("make check") and ensuring that all 38tests") or the LibreSSL equivalent ("make check") and ensuring that all