OpenSSL 3.1.0 and OpenSSH

[Sam James <sam@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 592 bytes --]


Hi folks,

OpenSSH currently has an overly restrict version check
for the runtime OpenSSL version vs the built-against-version,
so if you upgrade from e.g. openssl 3.0.x -> openssl 3.1.x
without rebuilding openssh (and you shouldn't need to, as
3.1.x is ABI compatible with 3.0.x), you'll get:

```
$ ssh -V
OpenSSL version mismatch. Built against 30000080, you have 30100000
```

I've reported a bug upstream and they're already on it, but
an FYI to avoid breaking your (or possibly other peoples' ;))
systems.

Upstream bug is https://bugzilla.mindrot.org/show_bug.cgi?id=3548.

best,
sam

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 377 bytes --]