diff options
-rw-r--r-- | INSTALL | 11 |
1 files changed, 7 insertions, 4 deletions
@@ -25,11 +25,14 @@ is supported but severely restricts the avilable ciphers and algorithms. | |||
25 | - OpenSSL (https://www.openssl.org) with any of the following versions: | 25 | - OpenSSL (https://www.openssl.org) with any of the following versions: |
26 | - 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g or any 1.1.1 | 26 | - 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g or any 1.1.1 |
27 | 27 | ||
28 | Note that due to a bug in EVP_CipherInit OpenSSL 1.1 versions prior to | ||
29 | 1.1.0g can't be used. | ||
30 | |||
28 | LibreSSL/OpenSSL should be compiled as a position-independent library | 31 | LibreSSL/OpenSSL should be compiled as a position-independent library |
29 | (i.e. with -fPIC) otherwise OpenSSH will not be able to link with it. | 32 | (i.e. -fPIC, eg by configuring OpenSSL as "./config [options] -fPIC" |
30 | If you must use a non-position-independent libcrypto, then you may need | 33 | or LibreSSL as "CFLAGS=-fPIC ./configure") otherwise OpenSSH will not |
31 | to configure OpenSSH --without-pie. Note that due to a bug in EVP_CipherInit | 34 | be able to link with it. If you must use a non-position-independent |
32 | OpenSSL 1.1 versions prior to 1.1.0g can't be used. | 35 | libcrypto, then you may need to configure OpenSSH --without-pie. |
33 | 36 | ||
34 | If you build either from source, running the OpenSSL self-test ("make | 37 | If you build either from source, running the OpenSSL self-test ("make |
35 | tests") or the LibreSSL equivalent ("make check") and ensuring that all | 38 | tests") or the LibreSSL equivalent ("make check") and ensuring that all |