update to match patch in

[gssapi-openssh.git] / openssh / INSTALL

diff --git a/openssh/INSTALL b/openssh/INSTALL
index 84e7b47d2e241026ce686815d106f6daf5545b68..777bdfe3854b1bd18bb89f489667f8ce2a3a507f 100644 (file)
--- a/openssh/INSTALL
+++ b/openssh/INSTALL
@@ -6,12 +6,9 @@ You will need working installations of Zlib and OpenSSL.
 Zlib:
 http://www.gzip.org/zlib/ 
 
-OpenSSL 0.9.6 or greater:
+OpenSSL 0.9.5a or greater:
 http://www.openssl.org/
 
-(OpenSSL 0.9.5a is partially supported, but some ciphers (SSH protocol 1 
-Blowfish included) do not work correctly.)
-
 RPMs of OpenSSL are available at http://violet.ibs.com.au/openssh/files/support.
 For Red Hat Linux 6.2, they have been released as errata.  RHL7 includes
 these.
@@ -20,11 +17,6 @@ OpenSSH can utilise Pluggable Authentication Modules (PAM) if your system
 supports it. PAM is standard on Redhat and Debian Linux, Solaris and
 HP-UX 11.
 
-NB. If you operating system supports /dev/random, you should configure 
-OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of 
-/dev/random. If you don't you will have to rely on ssh-rand-helper, which 
-is inferior to a good kernel-based solution.
-
 PAM:
 http://www.kernel.org/pub/linux/libs/pam/
 
@@ -53,6 +45,18 @@ lacks /dev/random and don't want to use OpenSSH's internal entropy collection.
 
 http://www.lothar.com/tech/crypto/
 
+GNU Make:
+ftp://ftp.gnu.org/gnu/make/
+
+OpenSSH has only been tested with GNU make. It may work with other
+'make' programs, but you are on your own.
+
+PCRE (PERL-compatible Regular Expression library):
+ftp://ftp.cus.cam.ac.uk/pub/software/programing/pcre/
+
+Most platforms do not require this.  However older Unices may not have a 
+posix regex library. PCRE provides a POSIX interface.
+
 S/Key Libraries:
 http://www.sparc.spb.su/solaris/skey/
 
@@ -116,6 +120,10 @@ different name.
 need a working installation of GNOME, including the development
 headers, for this to work.
 
+--with-random=/some/file allows you to specify an alternate source of
+random numbers (the default is /dev/urandom). Unless you are absolutely
+sure of what you are doing, it is best to leave this alone.
+
 --with-prngd-socket=/some/file allows you to enable EGD or PRNGD 
 support and to specify a PRNGd socket. Use this if your Unix lacks 
 /dev/random and you don't want to use OpenSSH's builtin entropy 
@@ -182,10 +190,6 @@ are installed.
 --with-4in6 Check for IPv4 in IPv6 mapped addresses and convert them to
 real (AF_INET) IPv4 addresses. Works around some quirks on Linux.
 
---with-opensc=DIR
---with-sectok=DIR allows for OpenSC or sectok smartcard libraries to
-be used with OpenSSH.  See 'README.smartcard' for more details.
-
 If you need to pass special options to the compiler or linker, you
 can specify these as environment variables before running ./configure.
 For example: