Blame openssh-nukeacss.sh
|
Nalin Dahyabhai |
deb1e4 |
#!/bin/sh
|
|
Nalin Dahyabhai |
deb1e4 |
#
|
|
Nalin Dahyabhai |
deb1e4 |
# Remove the ACSS implementation from OpenSSH, and disable its use so that the
|
|
Nalin Dahyabhai |
deb1e4 |
# rest of the package can still be built.
|
|
Nalin Dahyabhai |
deb1e4 |
#
|
|
Nalin Dahyabhai |
deb1e4 |
> acss.c
|
|
Nalin Dahyabhai |
deb1e4 |
patch -sp1 << EOF
|
|
Nalin Dahyabhai |
deb1e4 |
--- openssh/cipher.c
|
|
Nalin Dahyabhai |
deb1e4 |
+++ openssh/cipher.c
|
|
Nalin Dahyabhai |
deb1e4 |
@@ -53,6 +53,7 @@
|
|
Nalin Dahyabhai |
deb1e4 |
extern void ssh_rijndael_iv(EVP_CIPHER_CTX *, int, u_char *, u_int);
|
|
Nalin Dahyabhai |
deb1e4 |
#endif
|
|
Nalin Dahyabhai |
deb1e4 |
|
|
Nalin Dahyabhai |
deb1e4 |
+#if 0
|
|
Nalin Dahyabhai |
deb1e4 |
#if !defined(EVP_CTRL_SET_ACSS_MODE)
|
|
Nalin Dahyabhai |
deb1e4 |
# if (OPENSSL_VERSION_NUMBER >= 0x00907000L)
|
|
Nalin Dahyabhai |
deb1e4 |
extern const EVP_CIPHER *evp_acss(void);
|
|
Nalin Dahyabhai |
deb1e4 |
@@ -62,6 +63,9 @@
|
|
Nalin Dahyabhai |
deb1e4 |
# define EVP_acss NULL /* Don't try to support ACSS on older OpenSSL */
|
|
Nalin Dahyabhai |
deb1e4 |
# endif /* (OPENSSL_VERSION_NUMBER >= 0x00906000L) */
|
|
Nalin Dahyabhai |
deb1e4 |
#endif /* !defined(EVP_CTRL_SET_ACSS_MODE) */
|
|
Nalin Dahyabhai |
deb1e4 |
+#else
|
|
Nalin Dahyabhai |
deb1e4 |
+#define EVP_acss NULL
|
|
Nalin Dahyabhai |
deb1e4 |
+#endif /* 0 */
|
|
Nalin Dahyabhai |
deb1e4 |
|
|
Nalin Dahyabhai |
deb1e4 |
extern const EVP_CIPHER *evp_ssh1_bf(void);
|
|
Nalin Dahyabhai |
deb1e4 |
extern const EVP_CIPHER *evp_ssh1_3des(void);
|
|
Nalin Dahyabhai |
deb1e4 |
EOF
|