topic Re: upgrade to openssh 4.3p2 in Operating System - HP-UX

upgrade to openssh 4.3p2

Sunny Jaisinghani — Thu, 04 Oct 2007 23:09:57 GMT

Hello All,

I want to upgrade the openssh software on my system.
This is the current version of openssh installed on my system.

# swlist -l fileset| grep -i openssh
# openssh 3.7p1 openssh
openssh.commands 3.7p1 Commands
openssh.config 3.7p1 Configuration files
openssh.man 3.7p1 Man pages for SSH

I found from the logs that the depot file from which the software was installed is

T1471AA_A.04.30.014_HP-UX_B.11.00_32_64.de
pot

now i want openssh 4.3p2 on my system

can anyone help me find the depot file for this release of openssh. Is upgrade possible?

Regards

Re: upgrade to openssh 4.3p2

TY 007 — Fri, 05 Oct 2007 00:50:40 GMT

Hello Sunny,

Download:
http://mirrors.develooper.com/hpux/openssh-4.6p1-11.00.sd.bz

Unzip openssh-4.6p1-11.00.sd.bz --> openssh-4.6p1-11.00.sd

# cd /tmp
# swinstall -s /tmp/openssh-4.6p1-11.00.sd

Thanks

Re: upgrade to openssh 4.3p2

TY 007 — Fri, 05 Oct 2007 01:00:21 GMT

Hello Sunny,

Download bzip2:
http://mirrors.develooper.com/hpux/bzip2-1.0.2-pa2.0

# cd /tmp
# chmod 555 bzip2-1.0.2-pa2.0
# ./bzip2-1.0.2-pa2.0 -d openssh-4.6p1-11.00.sd.bz
# swinstall -s /tmp/openssh-4.6p1-11.00.sd

Thanks

Re: upgrade to openssh 4.3p2

Sunny Jaisinghani — Fri, 05 Oct 2007 01:03:45 GMT

the customer requirement is openssh 4.3p2 and not 4.6p1

i suppose 4.6p1 is the later release

does openssh and HPUX secureshell have differnent naming conventions

Re: upgrade to openssh 4.3p2

Torsten. — Fri, 05 Oct 2007 01:10:36 GMT

I'm not sure why you want to have an older version, but anyway, it's on the same site:

http://mirrors.develooper.com/hpux/openssh-4.3p2-11.00.sd.bz

(Thanks to H.Merijn)

Please keep in mind you are running an unsupported OS version!

Re: upgrade to openssh 4.3p2

Sunny Jaisinghani — Fri, 05 Oct 2007 01:17:40 GMT

I have these softwares installed on the server. How can i know which software is currently used by the kernel.

T1471AA A.04.30.014 is the latest installed

# swlist | grep -i t14
T1471AA A.04.30.014 HP-UX Secure Shell

# swlist | grep -i openssh
openssh 3.7p1 openssh

does "T1471AA A.04.30.014 HPUX secure shell" serve the purpose of openssh 4.3p2????

Re: upgrade to openssh 4.3p2

Torsten. — Fri, 05 Oct 2007 02:04:28 GMT

To get more information, use "whence" and "what", example:

# whence ssh
/usr/bin/ssh

# what /usr/bin/ssh
/usr/bin/ssh:
$Revision: 92453-07 linker linker crt0.o B.11.37 030623 $
$HP-UX Secure Shell: ssh.c,vA.04.50.003 ,TCP Wrappers: v7.6-ipv6.4, Zlib: v1.2.3 2007/05/16 $
$OpenSSL A.00.09.07l $

Re: upgrade to openssh 4.3p2

Sunny Jaisinghani — Fri, 05 Oct 2007 02:39:58 GMT

Hi,

This is the output from the server. What does this mean????

The kernel is using HPUX secure shell or openSSH.

# what /usr/bin/ssh
/usr/bin/ssh:
$Revision: 92453-07 linker linker crt0.o B.11.30 010914 $
$OpenBSD: ssh.c,v 1.186 2002/09/19 01:58:18 djm Exp $
$OpenBSD: sshconnect.c,v 1.135 2002/09/19 01:58:18 djm Exp $
$OpenBSD: sshconnect1.c,v 1.52 2002/08/08 13:50:23 aaron Exp $
$OpenBSD: sshconnect2.c,v 1.107 2002/07/01 19:48:46 markus Exp $

Re: upgrade to openssh 4.3p2

Torsten. — Fri, 05 Oct 2007 03:17:52 GMT

Another check could be this:

# ssh -V
OpenSSH_4.5p1+sftpfilecontrol-v1.1-hpn12v14, OpenSSL 0.9.7l 28 Sep 2006
HP-UX Secure Shell-A.04.50.003, HP-UX Secure Shell version

More info is here:

http://docs.hp.com/en/internet.html#Secure%20Shell

Re: upgrade to openssh 4.3p2

Sunny Jaisinghani — Fri, 05 Oct 2007 03:27:02 GMT

thanks a lot...
this helped a lot.

one more question

# ssh -V
OpenSSH_3.7p1, SSH protocols 1.5/2.0 OpenSSL 0x0090703f

I have openSSH present on this server as shown above.

Also we have installed the depot T1471AA_A.04.30.014_HPUX_B.11.00_32_64.depot

but it doesn't show in ssh -V
what changes i have to make so that ssh -V shows
HP-UX Secure Shell-A.04.30.014, HP-UX Secure Shell version

Thanks in advance

Re: upgrade to openssh 4.3p2

H.Merijn Brand (procura — Fri, 05 Oct 2007 03:57:25 GMT

FWIW

My versions install in /usr/local, and not in /usr or /opt, where the different HP versions install

And you can run them side-by-side, but they CAN clash with shared libs

HP still ships with OpenSSL 0.9.7, which we consider to old and insecure, and as 0.9.7 is incompatible with 0.9.8 regarding startup, PLEASE install matching OpenSSH with the OpenSSL you are using.
In other words, combine the correct versions of OpenSSL and OpenSSH or HP's counterparts.

Check - as stated - what 'ssh -V' does for the ssh you have installed, and check what openssl version it uses.

If you go for my packages, check if /etc/SHLIB_PATH does contain /usr/local/lib and/or /usr/local/ssl/lib *BEFORE* the /usr/lib and/or /opt/openssl/lib
YMMV

On most of my systems I run both side by side, and have my own depots prevail over HP's crap^Wold releases.

Enjoy, Have FUN! H.Merijn

Re: upgrade to openssh 4.3p2

Sunny Jaisinghani — Mon, 08 Oct 2007 07:23:39 GMT

I had to the change the soft links in /usr/bin .
i made all ssh links in /usr/bin point to appropriate binaries in /opt/ssh/PARISC2.0/bin/

so that ssh -V gives output
#ssh -V
OpenSSH_4.3p2-hpn, OpenSSL 0.9.7i 14 Oct 2005
HP-UX Secure Shell-A.04.30.014, HP-UX Secure Shell version