OpenSSH-6.7p1 for AIX
Written by Michael Felt   

Get the latest version of OpenSSH for AIX

You have probably see that title in developerworks for version 3.4p1 - latest update 20 Feb 2006 - but as AIXTOOLS I really have the latest version! OpenSSH-6.7p1 - packaged as openssh-6.7.0.1601.aix537.I

openssl-0.9.8k or later is needed

I build and tested on AIX 5.3 TL7 with  openssl.base            0.9.8.1101  installed - so take note - this will not work with AIX 5.1 or AIX 5.2 - or even earlier versions of AIX 5.3 - unless you try with this version of openssl. Somewhere in the CHANGES openssh says that openssh-0.9.8g or later is needed (i.e. >0.9.8.f)

On the system it was built on (AIX 5.3 TL7 with updated openssl.base)

root@x064:[/]oslevel -s
5300-07-10-0943

root@x064:[/]installp -d /data/aixtools/tools aixtools.openssh
installp:  No action was indicated.
        The -a (apply) flag is being assumed.
+-----------------------------------------------------------------------------+
                    Pre-installation Verification...
+-----------------------------------------------------------------------------+
Verifying selections...done
Verifying requisites...done
Results...

SUCCESSES
---------
  Filesets listed in this section passed pre-installation verification
  and will be installed.

  Selected Filesets
  -----------------
  aixtools.openssh.man 6.7.0.1601             # built 1504 0127 1309
  aixtools.openssh.rte 6.7.0.1601             # openssh 1504 0127 1309

  << End of Success Section >>

+-----------------------------------------------------------------------------+
                   BUILDDATE Verification ...
+-----------------------------------------------------------------------------+
Verifying build dates...done
FILESET STATISTICS
------------------
    2  Selected to be installed, of which:
        2  Passed pre-installation verification
  ----
    2  Total to be installed

+-----------------------------------------------------------------------------+
                         Installing Software...
+-----------------------------------------------------------------------------+

installp:  APPLYING software for:
        aixtools.openssh.rte 6.7.0.1601
        aixtools.openssh.man 6.7.0.1601

Finished processing all filesets.  (Total time:  2 secs).

+-----------------------------------------------------------------------------+
                                Summaries:
+-----------------------------------------------------------------------------+

Installation Summary
--------------------
Name                        Level           Part        Event       Result
-------------------------------------------------------------------------------
aixtools.openssh.rte        6.7.0.1601      USR         APPLY       SUCCESS   
aixtools.openssh.man        6.7.0.1601      USR         APPLY       SUCCESS   
aixtools.openssh.rte        6.7.0.1601      ROOT        APPLY       SUCCESS   
aixtools.openssh.man        6.7.0.1601      ROOT        APPLY       SUCCESS

Basic Tests   

root@x064:[/]/opt/bin/ssh -V                                 
OpenSSH_6.7p1, OpenSSL 0.9.8k 25 Mar 2009

root@x064:[/]/usr/bin/ssh -V
OpenSSH_4.5p1, OpenSSL 0.9.8d 28 Sep 2006

root@x064:[/]ar tv /usr/lib/libcrypto.a
rwxr-xr-x 370769/647632 2192276 Nov 09 07:44 2009 libcrypto.so.0.9.8

 

ASIS the package works with AIX 6.1 TL9

michael@x071:[/data/aixtools/tools]oslevel -s
/opt/bin/6100-09-02-1412
michael@x071:[/data/aixtools/tools]/opt/bin/ssh -V
OpenSSH_6.7p1, OpenSSL 0.9.8y 5 Feb 2013

michael@x071:[/data/aixtools/tools]/usr/bin/ssh -V
OpenSSH_6.0p1, OpenSSL 1.0.1e 11 Feb 2013

michael@x071:[/data/aixtools/tools]ar tv /usr/lib/libcrypto.a
rwxrwxr-x 435159/781431 2965832 May 01 06:57 2014 libcrypto.so.1.0.0
rwxrwxr-x 435159/781431 2253655 May 01 06:58 2014 libcrypto.so.0.9.8
michael@x071:[/data/aixtools/tools]ssh root@localhost
root@localhost's password:

 

AIX 7.1 - ignores the additional (older) library

There seem to be some issues with AIX 7.1 - not sure why it behaves differently than AIX 6.1 - but it does:

root@x070:[/mnt/dl.aixtools/tools]oslevel -s
7100-03-00-0000

root@x070:[/mnt/dl.aixtools/tools]/opt/bin/ssh -V
OpenSSH_6.7p1, OpenSSL 1.0.1e 11 Feb 2013

root@x070:[/mnt/dl.aixtools/tools]/usr/bin/ssh -V
OpenSSH_6.0p1, OpenSSL 1.0.1e 11 Feb 2013

root@x070:[/mnt/dl.aixtools/tools]ar tv /usr/lib/libcrypto.a
rwxrwxr-x 435159/1000  3189557 May 21 12:38 2013 libcrypto.so.1.0.0
rwxrwxr-x 435159/1000  3189557 May 21 13:12 2013 libcrypto.so.0.9.8
root@x070:[/mnt/dl.aixtools/tools]/opt/bin/ssh root@localhost
OpenSSL version mismatch. Built against 9080bf, you have 1000105f

So, sometime SOON - I will package a seperate version for AIX 7.1 Smile

Notice the differences in the OpenSSL version used

AIX 5.3 TL7 native AIX has OpenSSL 0.9.8d hardlinked it seems - because /opt/bin/ssh reports the version installed OpenSSL 0.9.8.k (k is 11th letter of the alphabet - hence 0.9.8.1101) while AIX 6.1 TL9 reports OpenSSL 0.9.8y (openssl 0.9.8.2501). AIX 7.1 is naughty in another way - rather than report as built against openssl-0.9.8.k it reports a hex value for 11 - i.e. b -- built against 9080bf (I would have preferred 0x0009080b)