Curl compiled with libssh2 - for Sparc Solaris 10

Jan Holzhueter jh at opencsw.org
Thu Jan 24 16:26:23 CET 2019


Hi,
please try:
pkgutil -t http://buildfarm.opencsw.org/opencsw/experimental/jh -u -U
CSWlibssh2-1



Am 24.01.19 um 15:18 schrieb Abbott, Mark via users:
> Specifically these are the Algo/Ciphers/MACs which we are being
> restricted on the SFTP servers we download from, as of
> 
> March 10^th .
> 
>  
> 
> Right now we’re dead in the water in respect of maintaining those
> automated curl downloads from our Solaris 10 boxes
> 
> without a version of curl which uses libssh2 1.8.0 or later, so please
> if anyone can assist and let us know that something
> 
> will be available in the v. short term that would be amazing.
> 
>  
> 
>  
> 
> *Key Exchange Algorithms*
> 
> ·         curve25519-sha256
> 
> ·         *curve25519-sha256 at libssh.org*
> <mailto:curve25519-sha256 at libssh.org>
> 
> ·         diffie-hellman-group18-sha512
> 
> ·         diffie-hellman-group14-sha256
> 
> ·         diffie-hellman-group16-sha512
> 
> ·         *diffie-hellman-group-exchange-sha256*
> 
> ·         ecdh-sha2-nistp256
> 
> ·         ecdh-sha2-nistp384
> 
> ·         ecdh-sha2-nistp521
> 
>  
> 
> *Ciphers*
> 
> ·         chacha20-poly1305 at openssh.com
> <mailto:chacha20-poly1305 at openssh.com>
> 
> ·         aes256-gcm at openssh.com <mailto:aes256-gcm at openssh.com>
> 
> ·        aes128-gcm at openssh.com <mailto:aes128-gcm at openssh.com>
> 
> ·         aes256-ctr
> 
> ·         aes192-ctr
> 
> ·         aes128-ctr
> 
>  
> 
> *MACs*
> 
> ·         hmac-sha2-512-etm at openssh.com
> <mailto:hmac-sha2-512-etm at openssh.com>
> 
> ·         hmac-sha2-256-etm at openssh.com
> <mailto:hmac-sha2-256-etm at openssh.com>
> 
> ·         umac-128-etm at openssh.com <mailto:umac-128-etm at openssh.com>
> 
> ·         hmac-sha2-512
> 
> ·         hmac-sha2-256
> 
>  
> 
>  
> 
>  
> 
> We have the latest packages available from the “unstable” release tree
> installed…. But libssh2/1.4.2  is the problem…
> 
>  
> 
> If CURL is re-compiled with libssh2  1.8.0  the problem goes away
> immediately… but with 1.4.2 it just can’t complete
> 
> negotiation with the above MAC/Cipher/KeyEx restrictions.
> 
>  
> 
> root at lonsett-p1 / # pkginfo | grep curl | grep CSW
> 
> application CSWcurl                          curl - A command line tool
> and library for client-side URL transfers
> 
> application CSWlibcurl4                      libcurl4 - Library for
> client-side URL transfers, libcurl.so.4
> 
> application CSWlibcurl4-feature              libcurl4_feature -
> Full-features library for client-side URL transfers superseding libcurl.so.4
> 
>  
> 
> root at lonsett-p1 / # curl -V
> 
> curl 7.63.0 (sparc-sun-solaris2.10) libcurl/7.63.0 OpenSSL/1.0.2o
> zlib/1.2.8 brotli/1.0.2 c-ares/1.10.0 libidn2/2.0.4 libpsl/0.19.1
> (+libidn2/2.0.4) libssh2/1.4.2 nghttp2/1.30.0 librtmp/2.3
> 
> Release-Date: 2018-12-12
> 
> Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps
> pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp
> 
> Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM
> NTLM_WB SSL libz brotli TLS-SRP HTTP2 UnixSockets HTTPS-proxy PSL Metalink
> 
>  
> 
>  
> 
> Thanks Again,
> 
> 
> Mark
> 
>  
> 
>  
> 
> *From:*users
> [mailto:users-bounces+mabbott=bgcpartners.com at lists.opencsw.org] *On
> Behalf Of *CMH via users
> *Sent:* 24 January 2019 14:01
> *To:* users at lists.opencsw.org
> *Cc:* CMH
> *Subject:* Re: Curl compiled with libssh2 - for Sparc Solaris 10
> 
>  
> 
> I would very interested in this as well.
> 
> Hello Open CSW Team,
> 
>  
> 
> Please can you I beg one of you to compile a version of CURL for Solaris
> Sparc 10 using
> 
> libssh2 1.8.0 or later.
> 
>  
> 
> The current “unstable” repository version still uses libssh2 v1.4.2 and
>  unfortunately we
> 
> are being restricted by the  MACs/Key Algos & Ciphers for SFTP
> connectivity next month
> 
> and I’ve only managed to get it working on Fedora at home which has curl
> built with
> 
> 1.8.0 libssh2 – so this is the key.
> 
>  
> 
> Doesn’t matter so much which version of Curl is compiled It just has to
> be compiled
> 
> with 1.8.0 libssh2.
> 
>  
> 
> If you could help me here I would be v. v. grateful.
> 
>  
> 
> Thanks,
> 
>  
> 
> Mark
> 
> ------------------------------------------------------------------------
> 
> CONFIDENTIAL
> An electronic communication(s)/message(s), including its contents and
> attachments, if any, may contain privileged or confidential information,
> or may be otherwise protected by work product immunity or other legal
> rules. No confidentiality or privilege is waived by any erroneously
> transmitted communication. Accessing, copying or re-using of information
> by non-intended or non-authorized recipients is prohibited. If you are
> not the named recipient please notify the sender and immediately delete
> this communication. You may not disseminate, distribute, or forward this
> message or disclose its contents to anybody else. Copyright and any
> other intellectual property rights in its contents are the sole property
> of BGC Partners Inc. and its affiliates (collectively, “BGC,” “we,” or
> “us”).
> 
> MAY CONTAIN ERRORS AND/OR VIRUSES
> Electronic communications/messages cannot be guaranteed to be secure or
> error-free. The sender therefore does not accept liability for any
> errors or omissions in the contents of this message, which arise as a
> result of such transmission. If verification is required, please request
> a hard-copy version.
> 
> Although we routinely screen for viruses, recipients should check this
> communications/message and any attachments for viruses. We make no
> representation or warranty as to the absence of viruses in this e-mail
> or any attachments. Please note that, to ensure regulatory compliance
> and for the protection of our customers and business, we may monitor and
> read e-mails sent to and from server(s) used by us.
> 
> INFORMATION PURPOSES ONLY
> The information contained in this electronic communication/message and
> any attachments is for information purposes, and should not be regarded
> as an offer to sell, or a solicitation of an offer to buy, any security
> in any jurisdiction where such an offer or solicitation would be in
> violation of any local laws. It does not constitute a recommendation or
> take into account the particular investment objectives, financial
> conditions, or needs of specific investors. Any prices or data contained
> herein are indicative and do not represent where the underlying
> instrument(s) may trade in the market at any given point in time, nor
> does such price(s) represent a determination of the underlying value of
> a particular instrument(s). This information may be changed at any time
> without notice or obligation to update. BGC accepts no liability for any
> loss (whether direct, indirect or consequential) that may arise from any
> use of the information contained herein or derived herefrom. Reliance
> may not be placed on trade confirmations issued other than by our
> Operations Department.
> 
> RETENTION
> Please note that any electronic communications/messages conducted within
> or through BGC systems is subject to monitoring, review, retention, and
> external production.
> 
> BGC Financial LP is a broker-dealer registered with the U.S. Securities
> and Exchange, a member of FINRA and a member of SIPC.
> 
> BGC Financial LP is a member of the National Futures Association as a
> swap firm and a futures commission merchant.
> 
> BGC Derivatives Markets LP is a swap execution facility registered with
> the Commodity Futures Trading Commission.
> 
> BGC Brokers LP ("BGCB") is authorised and regulated by the Financial
> Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under
> the laws of England (under Limited Partnership Act 1907 LP011453) and
> its VAT registration number is 577 406809. BGCB's registered office is
> at 12 Endeavour Square, London, E20 1JN. For any issues arising from
> this email please reply to the sender.
> 
> BGCB appears on the FCA register under no 454814. The FCA register
> appears at www.fca.org.uk/register
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.fca.org.uk_register&d=DwMF-g&c=3v6EBbtpnn9A7jIZYjOw6KN7Pe17WoimzcinOq2Xztg&r=h1BgflT2I7NyYPzaLZCy6lFcAOsJtijy_yb0p-xhBKE&m=6UhvTGJT4oaYbplOYIiAEB1wmtNeCWlXduRCMKiydyY&s=HLBtG5Vs2yr3LkPoLujS2pwquiIjikdY9D3t2f0eAVA&e=>.
> The FCA is a financial services industry regulator in the United Kingdom
> and is located at 12 Endeavour Square, London, E20 1JN.
> 
> An individuals’ personal data under the GDPR - For further information
> about the way BGC entities (and relevant affiliates) within the European
> Economic Area (EEA) use your personal data please see our Third Party
> Privacy Notice at www.bgcpartners.com/notices/
> <http://www.bgcpartners.com/notices/> or at such other place as we may
> provide notice of from time to time.
> Marketing within the European Economic Area - BGC entities within the
> EEA may contact you about industry news, offers and information relating
> to their products and services which they think would be of interest to
> you. You can tell them you do not wish to receive such communications by
> contacting them at DPM at bgcpartners.com <mailto:DPM at bgcpartners.com>.
> For additional disclosures, please visit
> http://www.bgcpartners.com/disclaimers/
> 
> 
> 
> -- 
> 
> Systems Since 1948 
> 
> Craig M. Houck ><>
> 
> Tech Hub/Computer Center 
> 
>    3rd Floor 332
> 
>      607 777 6827
> 
> We are only as good as the problems we solve!
> 
> ------------------------------------------------------------------------
> CONFIDENTIAL
> An electronic communication(s)/message(s), including its contents and
> attachments, if any, may contain privileged or confidential information,
> or may be otherwise protected by work product immunity or other legal
> rules. No confidentiality or privilege is waived by any erroneously
> transmitted communication. Accessing, copying or re-using of information
> by non-intended or non-authorized recipients is prohibited. If you are
> not the named recipient please notify the sender and immediately delete
> this communication. You may not disseminate, distribute, or forward this
> message or disclose its contents to anybody else. Copyright and any
> other intellectual property rights in its contents are the sole property
> of BGC Partners Inc. and its affiliates (collectively, “BGC,” “we,” or
> “us”).
> 
> MAY CONTAIN ERRORS AND/OR VIRUSES
> Electronic communications/messages cannot be guaranteed to be secure or
> error-free. The sender therefore does not accept liability for any
> errors or omissions in the contents of this message, which arise as a
> result of such transmission. If verification is required, please request
> a hard-copy version.
> 
> Although we routinely screen for viruses, recipients should check this
> communications/message and any attachments for viruses. We make no
> representation or warranty as to the absence of viruses in this e-mail
> or any attachments. Please note that, to ensure regulatory compliance
> and for the protection of our customers and business, we may monitor and
> read e-mails sent to and from server(s) used by us.
> 
> INFORMATION PURPOSES ONLY
> The information contained in this electronic communication/message and
> any attachments is for information purposes, and should not be regarded
> as an offer to sell, or a solicitation of an offer to buy, any security
> in any jurisdiction where such an offer or solicitation would be in
> violation of any local laws. It does not constitute a recommendation or
> take into account the particular investment objectives, financial
> conditions, or needs of specific investors. Any prices or data contained
> herein are indicative and do not represent where the underlying
> instrument(s) may trade in the market at any given point in time, nor
> does such price(s) represent a determination of the underlying value of
> a particular instrument(s). This information may be changed at any time
> without notice or obligation to update. BGC accepts no liability for any
> loss (whether direct, indirect or consequential) that may arise from any
> use of the information contained herein or derived herefrom. Reliance
> may not be placed on trade confirmations issued other than by our
> Operations Department.
> 
> RETENTION
> Please note that any electronic communications/messages conducted within
> or through BGC systems is subject to monitoring, review, retention, and
> external production.
> 
> BGC Financial LP is a broker-dealer registered with the U.S. Securities
> and Exchange, a member of FINRA and a member of SIPC.
> 
> BGC Financial LP is a member of the National Futures Association as a
> swap firm and a futures commission merchant.
> 
> BGC Derivatives Markets LP is a swap execution facility registered with
> the Commodity Futures Trading Commission.
> 
> BGC Brokers LP ("BGCB") is authorised and regulated by the Financial
> Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under
> the laws of England (under Limited Partnership Act 1907 LP011453) and
> its VAT registration number is 577 406809. BGCB's registered office is
> at 12 Endeavour Square, London, E20 1JN. For any issues arising from
> this email please reply to the sender.
> 
> BGCB appears on the FCA register under no 454814. The FCA register
> appears at www.fca.org.uk/register. The FCA is a financial services
> industry regulator in the United Kingdom and is located at 12 Endeavour
> Square, London, E20 1JN.
> 
> An individuals’ personal data under the GDPR - For further information
> about the way BGC entities (and relevant affiliates) within the European
> Economic Area (EEA) use your personal data please see our Third Party
> Privacy Notice at www.bgcpartners.com/notices/ or at such other place as
> we may provide notice of from time to time.
> Marketing within the European Economic Area - BGC entities within the
> EEA may contact you about industry news, offers and information relating
> to their products and services which they think would be of interest to
> you. You can tell them you do not wish to receive such communications by
> contacting them at DPM at bgcpartners.com.
> For additional disclosures, please visit
> http://www.bgcpartners.com/disclaimers/



More information about the users mailing list