Page MenuHomeFreeBSD

openssh: Request the OpenSSL 1.1 API
ClosedPublic

Authored by jlduran on Mar 26 2025, 11:42 AM.
Tags
None
Referenced Files
F142536629: D49517.id152721.diff
Tue, Jan 20, 6:03 PM
Unknown Object (File)
Dec 18 2025, 2:05 PM
Unknown Object (File)
Dec 8 2025, 4:34 AM
Unknown Object (File)
Nov 26 2025, 6:29 PM
Unknown Object (File)
Nov 13 2025, 4:06 AM
Unknown Object (File)
Nov 12 2025, 11:13 PM
Unknown Object (File)
Nov 12 2025, 9:23 PM
Unknown Object (File)
Nov 12 2025, 11:57 AM
Subscribers

Details

Summary

Upstream OpenSSH commit f51423bda ("request 1.1x API compatibility for
OpenSSL >=3.x") requests OPENSSL_API_COMPAT version 0x10100000L (OpenSSL
1.1.0), in order to avoid warnings about deprecated functions.

Do the same here, to avoid getting those warnings.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 63135
Build 60019: arc lint + arc unit

Event Timeline

What do you think of just adding it in secure/ssh.mk?

What do you think of just adding it in secure/ssh.mk?

Yes, that was my first attempt, I thought requesting the API only where needed would be preferred. Thinking about it, it should apply to the entire OpenSSH, so better do it in secure/ssh.mk.
Will change it!

I thought requesting the API only where needed would be preferred.

This was my thinking early on for these sorts of things as well, but doing it as in your updated diff is both simpler and safer. I think the only downside will be the somewhat longer compiler command lines (when looking at logs etc.)

This revision is now accepted and ready to land.Mar 26 2025, 2:00 PM
This revision was automatically updated to reflect the committed changes.