OpenSSH-6.7p1 for AIX
Written by Michael Felt   

Get the latest version of OpenSSH for AIX

You have probably see that title in developerworks for version 3.4p1 - latest update 20 Feb 2006 - but as AIXTOOLS I really have the latest version! OpenSSH-6.7p1 - packaged as openssh-

openssl-0.9.8k or later is needed

I build and tested on AIX 5.3 TL7 with  openssl.base    installed - so take note - this will not work with AIX 5.1 or AIX 5.2 - or even earlier versions of AIX 5.3 - unless you try with this version of openssl. Somewhere in the CHANGES openssh says that openssh-0.9.8g or later is needed (i.e. >0.9.8.f)

On the system it was built on (AIX 5.3 TL7 with updated openssl.base)

root@x064:[/]oslevel -s

root@x064:[/]installp -d /data/aixtools/tools aixtools.openssh
installp:  No action was indicated.
        The -a (apply) flag is being assumed.
                    Pre-installation Verification...
Verifying selections...done
Verifying requisites...done

  Filesets listed in this section passed pre-installation verification
  and will be installed.

  Selected Filesets
  -----------------             # built 1504 0127 1309
  aixtools.openssh.rte             # openssh 1504 0127 1309

  << End of Success Section >>

                   BUILDDATE Verification ...
Verifying build dates...done
    2  Selected to be installed, of which:
        2  Passed pre-installation verification
    2  Total to be installed

                         Installing Software...

installp:  APPLYING software for:

Finished processing all filesets.  (Total time:  2 secs).


Installation Summary
Name                        Level           Part        Event       Result
aixtools.openssh.rte      USR         APPLY       SUCCESS      USR         APPLY       SUCCESS   
aixtools.openssh.rte      ROOT        APPLY       SUCCESS      ROOT        APPLY       SUCCESS

Basic Tests   

root@x064:[/]/opt/bin/ssh -V                                 
OpenSSH_6.7p1, OpenSSL 0.9.8k 25 Mar 2009

root@x064:[/]/usr/bin/ssh -V
OpenSSH_4.5p1, OpenSSL 0.9.8d 28 Sep 2006

root@x064:[/]ar tv /usr/lib/libcrypto.a
rwxr-xr-x 370769/647632 2192276 Nov 09 07:44 2009


ASIS the package works with AIX 6.1 TL9

michael@x071:[/data/aixtools/tools]oslevel -s
michael@x071:[/data/aixtools/tools]/opt/bin/ssh -V
OpenSSH_6.7p1, OpenSSL 0.9.8y 5 Feb 2013

michael@x071:[/data/aixtools/tools]/usr/bin/ssh -V
OpenSSH_6.0p1, OpenSSL 1.0.1e 11 Feb 2013

michael@x071:[/data/aixtools/tools]ar tv /usr/lib/libcrypto.a
rwxrwxr-x 435159/781431 2965832 May 01 06:57 2014
rwxrwxr-x 435159/781431 2253655 May 01 06:58 2014
michael@x071:[/data/aixtools/tools]ssh root@localhost
root@localhost's password:


AIX 7.1 - ignores the additional (older) library

There seem to be some issues with AIX 7.1 - not sure why it behaves differently than AIX 6.1 - but it does:

root@x070:[/mnt/dl.aixtools/tools]oslevel -s

root@x070:[/mnt/dl.aixtools/tools]/opt/bin/ssh -V
OpenSSH_6.7p1, OpenSSL 1.0.1e 11 Feb 2013

root@x070:[/mnt/dl.aixtools/tools]/usr/bin/ssh -V
OpenSSH_6.0p1, OpenSSL 1.0.1e 11 Feb 2013

root@x070:[/mnt/dl.aixtools/tools]ar tv /usr/lib/libcrypto.a
rwxrwxr-x 435159/1000  3189557 May 21 12:38 2013
rwxrwxr-x 435159/1000  3189557 May 21 13:12 2013
root@x070:[/mnt/dl.aixtools/tools]/opt/bin/ssh root@localhost
OpenSSL version mismatch. Built against 9080bf, you have 1000105f

So, sometime SOON - I will package a seperate version for AIX 7.1 Smile

Notice the differences in the OpenSSL version used

AIX 5.3 TL7 native AIX has OpenSSL 0.9.8d hardlinked it seems - because /opt/bin/ssh reports the version installed OpenSSL 0.9.8.k (k is 11th letter of the alphabet - hence while AIX 6.1 TL9 reports OpenSSL 0.9.8y (openssl AIX 7.1 is naughty in another way - rather than report as built against openssl-0.9.8.k it reports a hex value for 11 - i.e. b -- built against 9080bf (I would have preferred 0x0009080b)