diff options
author | Darren Tucker <dtucker@dtucker.net> | 2019-12-09 17:23:22 +1100 |
---|---|---|
committer | Darren Tucker <dtucker@dtucker.net> | 2019-12-09 17:23:22 +1100 |
commit | b66fa5da25c4b5b67cf9f0ce7af513f5a6a6a686 (patch) | |
tree | 28160265683ab8a30e151f2e64b4cfb2e3a1a020 /INSTALL | |
parent | fa7924008e838cded7e8a561356ffe5e06e0ed64 (diff) |
Recommend running LibreSSL or OpenSSL self-tests.
Diffstat (limited to 'INSTALL')
-rw-r--r-- | INSTALL | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -31,6 +31,10 @@ If you must use a non-position-independent libcrypto, then you may need to configure OpenSSH --without-pie. Note that due to a bug in EVP_CipherInit OpenSSL 1.1 versions prior to 1.1.0g can't be used. +If you build either from source, running the OpenSSL self-test ("make +tests") or the LibreSSL equivalent ("make check") and ensuring that all +tests pass is strongly recommended. + NB. If you operating system supports /dev/random, you should configure libcrypto (LibreSSL/OpenSSL) to use it. OpenSSH relies on libcrypto's direct support of /dev/random, or failing that, either prngd or egd. |