X-Git-Url: http://andersk.mit.edu/gitweb/openssh.git/blobdiff_plain/99c8ddac8d02e49f4cdc3976b5d51b9685a1d991..4608d193d8f1f9bbf82c6977e7b7ec5b8080fa4c:/INSTALL diff --git a/INSTALL b/INSTALL index 694d4f59..7fa123d6 100644 --- a/INSTALL +++ b/INSTALL @@ -4,19 +4,23 @@ You will need working installations of Zlib and OpenSSL. Zlib: -http://www.freesoftware.com/pub/infozip/zlib/ +http://www.gzip.org/zlib/ -OpenSSL 0.9.5a or greater: +OpenSSL 0.9.6 or greater: http://www.openssl.org/ -RPMs of OpenSSL are available at http://violet.ibs.com.au/openssh/files/support. -For Red Hat Linux 6.2, they have been released as errata. RHL7 includes -these. +(OpenSSL 0.9.5a is partially supported, but some ciphers (SSH protocol 1 +Blowfish) do not work correctly.) OpenSSH can utilise Pluggable Authentication Modules (PAM) if your system supports it. PAM is standard on Redhat and Debian Linux, Solaris and HP-UX 11. +NB. If you operating system supports /dev/random, you should configure +OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of +/dev/random. If you don't you will have to rely on ssh-rand-helper, which +is inferior to a good kernel-based solution. + PAM: http://www.kernel.org/pub/linux/libs/pam/ @@ -29,7 +33,7 @@ http://www.gnome.org/ Alternatively, Jim Knoble has written an excellent X11 passphrase requester. This is maintained separately at: -http://www.ntrnet.net/~jmknoble/software/x11-ssh-askpass/index.html +http://www.jmknoble.net/software/x11-ssh-askpass/ PRNGD: @@ -45,18 +49,6 @@ lacks /dev/random and don't want to use OpenSSH's internal entropy collection. http://www.lothar.com/tech/crypto/ -GNU Make: -ftp://ftp.gnu.org/gnu/make/ - -OpenSSH has only been tested with GNU make. It may work with other -'make' programs, but you are on your own. - -PCRE (PERL-compatible Regular Expression library): -ftp://ftp.cus.cam.ac.uk/pub/software/programing/pcre/ - -Most platforms do not require this. However older Unices may not have a -posix regex library. PCRE provides a POSIX interface. - S/Key Libraries: http://www.sparc.spb.su/solaris/skey/ @@ -109,21 +101,12 @@ name). There are a few other options to the configure script: ---with-rsh=PATH allows you to specify the path to your rsh program. -Normally ./configure will search the current $PATH for 'rsh'. You -may need to specify this option if rsh is not in your path or has a -different name. - --with-pam enables PAM support. --enable-gnome-askpass will build the GNOME passphrase dialog. You need a working installation of GNOME, including the development headers, for this to work. ---with-random=/some/file allows you to specify an alternate source of -random numbers (the default is /dev/urandom). Unless you are absolutely -sure of what you are doing, it is best to leave this alone. - --with-prngd-socket=/some/file allows you to enable EGD or PRNGD support and to specify a PRNGd socket. Use this if your Unix lacks /dev/random and you don't want to use OpenSSH's builtin entropy @@ -140,7 +123,7 @@ it if lastlog is installed in a different place. --without-lastlog will disable lastlog support entirely. ---with-sia, --without-sia will enable or disable OSF1's Security +--with-osfsia, --without-osfsia will enable or disable OSF1's Security Integration Architecture. The default for OSF1 machines is enable. --with-kerberos4=PATH will enable Kerberos IV support. You will need @@ -178,18 +161,16 @@ created. --with-xauth=PATH specifies the location of the xauth binary ---with-ipv4-default instructs OpenSSH to use IPv4 by default for new -connections. Normally OpenSSH will try attempt to lookup both IPv6 and -IPv4 addresses. On Linux/glibc-2.1.2 this causes long delays in name -resolution. If this option is specified, you can still attempt to -connect to IPv6 addresses using the command line option '-6'. - --with-ssl-dir=DIR allows you to specify where your OpenSSL libraries are installed. --with-4in6 Check for IPv4 in IPv6 mapped addresses and convert them to real (AF_INET) IPv4 addresses. Works around some quirks on Linux. +--with-opensc=DIR +--with-sectok=DIR allows for OpenSC or sectok smartcard libraries to +be used with OpenSSH. See 'README.smartcard' for more details. + If you need to pass special options to the compiler or linker, you can specify these as environment variables before running ./configure. For example: