Page MenuHomeFreeBSD

openssh: Request the OpenSSL 1.1 API
ClosedPublic

Authored by jlduran on Mar 26 2025, 11:42 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Dec 18, 2:05 PM
Unknown Object (File)
Mon, Dec 8, 4:34 AM
Unknown Object (File)
Nov 26 2025, 6:29 PM
Unknown Object (File)
Nov 13 2025, 4:06 AM
Unknown Object (File)
Nov 12 2025, 11:13 PM
Unknown Object (File)
Nov 12 2025, 9:23 PM
Unknown Object (File)
Nov 12 2025, 11:57 AM
Unknown Object (File)
Oct 20 2025, 7:24 AM
Subscribers

Details

Summary

Upstream OpenSSH commit f51423bda ("request 1.1x API compatibility for
OpenSSL >=3.x") requests OPENSSL_API_COMPAT version 0x10100000L (OpenSSL
1.1.0), in order to avoid warnings about deprecated functions.

Do the same here, to avoid getting those warnings.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

What do you think of just adding it in secure/ssh.mk?

What do you think of just adding it in secure/ssh.mk?

Yes, that was my first attempt, I thought requesting the API only where needed would be preferred. Thinking about it, it should apply to the entire OpenSSH, so better do it in secure/ssh.mk.
Will change it!

I thought requesting the API only where needed would be preferred.

This was my thinking early on for these sorts of things as well, but doing it as in your updated diff is both simpler and safer. I think the only downside will be the somewhat longer compiler command lines (when looking at logs etc.)

This revision is now accepted and ready to land.Mar 26 2025, 2:00 PM
This revision was automatically updated to reflect the committed changes.