[ssh_x509] audit module and "deffer seed_rng invocation in daemon after closefrom call"

ssh_x509 at roumenpetrov.info ssh_x509 at roumenpetrov.info
Thu Dec 22 09:40:13 EET 2022


Hello,


Release 14.0 adds:
* deffer seed_rng invocation in daemon
   Call after closefrom as work-around for random generator provided by an engine.

So far so good but it seems to me this break some configurations. For now these configurations are are related to enabled audit module.
* If audit module is set to linux it fails on some old Fedora releases.
* If audit module is set to debug it fails if build is with recent OpenSSL 1.1.1 releases. It is know to pass with OpenSSL 1.1.1k and 1.1.1l.

Note that PKIX-SSH by default enable engine support.

So patch is put on hold. Soon will be published new release with reverted modification.


Regards,
Roumen Petrov




More information about the ssh_x509 mailing list