The package net-misc/openssh-3.7.1_p1-r1 fails to compile properly on my Gentoo Alpha machine; this is significant because this release fixes a security problem. Reproducible: Always Steps to Reproduce: 1. emerge openssh 2. 3. Actual Results: gcc -mcpu=ev67 -O3 -pipe -Wall -Wpointer-arith -Wno-uninitialized -I. -I. -DSSHDIR=\"/etc/ssh\" -D_PATH_SSH_PROGRAM=\"/usr/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/lib/misc/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/lib/misc/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/lib/misc/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/lib/misc/ssh-rand-helper\" -DHAVE_CONFIG_H -c sshconnect2.c gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o sshconnect2.o -L. -Lopenbsd-compat/ -lssh -lopenbsd-compat -lutil -lz -lnsl -lcrypto -lcrypt ./libssh.a(rsa.o)(.text+0x47c): In function `rsa_generate_additional_parameters': : undefined reference to `BN_mod' ./libssh.a(rsa.o)(.text+0x480): In function `rsa_generate_additional_parameters': : undefined reference to `BN_mod' ./libssh.a(rsa.o)(.text+0x4c8): In function `rsa_generate_additional_parameters': : undefined reference to `BN_mod' ./libssh.a(rsa.o)(.text+0x4cc): In function `rsa_generate_additional_parameters': : undefined reference to `BN_mod' collect2: ld returned 1 exit status make: *** [ssh] Error 1 !!! ERROR: net-misc/openssh-3.7.1_p1-r1 failed. !!! Function src_compile, Line 102, Exitcode 2 !!! compile problem Expected Results: Compiled and emerged. Portage 2.0.49-r5 (default-alpha-1.4, gcc-3.2.3, glibc-2.3.1-r4,2.3.2-r1, 2.4.21-alpha-r1) ================================================================= System uname: 2.4.21-alpha-r1 alpha EV67 ccache version 2.2 [enabled] ACCEPT_KEYWORDS="alpha ~alpha" AUTOCLEAN="yes" CFLAGS="-mcpu=ev67 -O3 -pipe " CHOST="alphaev67-unknown-linux-gnu" COMPILER="gcc3" CONFIG_PROTECT="/etc /var/qmail/control /usr/share/config /usr/kde/2/share/config /usr/kde/3/share/config /usr/X11R6/lib/X11/xkb" CONFIG_PROTECT_MASK="/etc/gconf /etc/env.d" CXXFLAGS="-mcpu=ev67 -O3 -pipe " DISTDIR="/usr/portage/distfiles" FEATURES="ccache" GENTOO_MIRRORS="http://gentoo.oregonstate.edu http://www.ibiblio.org/pub/Linux/distributions/gentoo" MAKEOPTS="-j1" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/my_gentoo" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="alpha encode foomaticdb gif jpeg kde libg++ libwww mikmod ncurses oss pdflib png qt quicktime sdl spell truetype xml2 xmms xv gnome-libs gdbm berkdb slang readline tcltk ruby gpm tcpd pam ssl perl python esd imlib oggvorbis motif opengl mozilla ev6 ipv6 X xinerama gtk gtk2 zlib gnome cups ldap crypt mozspellcheck -alsa -nls"
I submitted this bug previously but it was lost due to some bugzilla migration. openssh-3.7.x does not compile against openssl-0.9.7b. In openssl-0.9.6j, BN_mod is a function. In 0.9.7b, it is a macro. Why this should cause the link to fail, I don't know. rsa.c (in openssh) does indirectly include <crypto/bn.h>. Please change Hardware on this bug to all, because this happens on i386 as well, and it seems to be an API problem. As a workaround I masked =dev-libs/openssl-0.9.7*, compiled openssh, and unmasked openssl (because I had a number of things that were already linked against 0.9.7b and broke due to the masking). The openssl-0.9.7b ebuilds also build 0.9.6j but install the 0.9.7b headers. The openssh configure does detect when 0.9.7b is installed but it still doesn't work.
*** This bug has been marked as a duplicate of 13795 ***
the answer is here: http://bugs.gentoo.org/show_bug.cgi?id=29323#c5
