Marcus Meissner
0c4ab9d007
- By default openSSH checks at *runtime* if the openssl API version matches with the running library, that might be good if you are compiling SSH yourself but it is a totally insane way to check for binary/source compatibility in a distribution. OBS-URL: https://build.opensuse.org/request/show/120648 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=25
16 lines
490 B
Diff
16 lines
490 B
Diff
--- entropy.c.orig
|
|
+++ entropy.c
|
|
@@ -213,10 +213,11 @@ seed_rng(void)
|
|
* OpenSSL version numbers: MNNFFPPS: major minor fix patch status
|
|
* We match major, minor, fix and status (not patch)
|
|
*/
|
|
+ /*
|
|
if ((SSLeay() ^ OPENSSL_VERSION_NUMBER) & ~0xff0L)
|
|
fatal("OpenSSL version mismatch. Built against %lx, you "
|
|
"have %lx", (u_long)OPENSSL_VERSION_NUMBER, SSLeay());
|
|
-
|
|
+*/
|
|
#ifndef OPENSSL_PRNG_ONLY
|
|
if (RAND_status() == 1) {
|
|
debug3("RNG is ready, skipping seeding");
|