Curl compiled with libssh2 - for Sparc Solaris 10

Jan Holzhüter jh at opencsw.org
Thu Jan 24 21:23:29 CET 2019


Hi,
Am 24.01.19 um 17:09 schrieb Abbott, Mark:
> Jan – I don’t know how to thanks you J
> 
>  
> 
> That has worked successfully..
> 

thx for the feedback.
Will push it to the unstable repo tomorrow then.


>  
> 
>  
> 
>  
> 
>  
> 
> And that has also indicated that I just need to update the libssh2
> library on our RHEL boxes which are similarly affected
> 
> &  not necessarily the rest of the CURL distribution.
> 
>  
> 
> Thank you once again.
> 
>  
> 
> Mark
> 
>  
> 
> -----Original Message-----
> From: Jan Holzhueter [mailto:jh at opencsw.org]
> Sent: 24 January 2019 15:26
> To: Questions and discussions
> Cc: Abbott, Mark; CMH
> Subject: Re: Curl compiled with libssh2 - for Sparc Solaris 10
> 
>  
> 
> Hi,
> 
> please try:
> 
> pkgutil -t
> https://urldefense.proofpoint.com/v2/url?u=http-3A__buildfarm.opencsw.org_opencsw_experimental_jh&d=DwIF-g&c=3v6EBbtpnn9A7jIZYjOw6KN7Pe17WoimzcinOq2Xztg&r=h1BgflT2I7NyYPzaLZCy6lFcAOsJtijy_yb0p-xhBKE&m=fofNnN5r5QD6AeOpbIz7fvHyKwB20UEczc7f-GDpWkQ&s=nHDJi5f8nER7TILAoQDU4jMxp2fkEVsl7h41mjZnzZU&e=
> -u -U
> 
> CSWlibssh2-1
> 
>  
> 
>  
> 
>  
> 
> Am 24.01.19 um 15:18 schrieb Abbott, Mark via users:
> 
>> Specifically these are the Algo/Ciphers/MACs which we are being
> 
>> restricted on the SFTP servers we download from, as of
> 
>>
> 
>> March 10^th .
> 
>>
> 
>>  
> 
>>
> 
>> Right now we’re dead in the water in respect of maintaining those
> 
>> automated curl downloads from our Solaris 10 boxes
> 
>>
> 
>> without a version of curl which uses libssh2 1.8.0 or later, so please
> 
>> if anyone can assist and let us know that something
> 
>>
> 
>> will be available in the v. short term that would be amazing.
> 
>>
> 
>>  
> 
>>
> 
>>  
> 
>>
> 
>> *Key Exchange Algorithms*
> 
>>
> 
>> ·         curve25519-sha256
> 
>>
> 
>> ·         *curve25519-sha256 at libssh.org*
> <mailto:*curve25519-sha256 at libssh.org*>
> 
>> <mailto:curve25519-sha256 at libssh.org>
> 
>>
> 
>> ·         diffie-hellman-group18-sha512
> 
>>
> 
>> ·         diffie-hellman-group14-sha256
> 
>>
> 
>> ·         diffie-hellman-group16-sha512
> 
>>
> 
>> ·         *diffie-hellman-group-exchange-sha256*
> 
>>
> 
>> ·         ecdh-sha2-nistp256
> 
>>
> 
>> ·         ecdh-sha2-nistp384
> 
>>
> 
>> ·         ecdh-sha2-nistp521
> 
>>
> 
>>  
> 
>>
> 
>> *Ciphers*
> 
>>
> 
>> ·         chacha20-poly1305 at openssh.com
> <mailto:chacha20-poly1305 at openssh.com>
> 
>> <mailto:chacha20-poly1305 at openssh.com>
> 
>>
> 
>> ·         aes256-gcm at openssh.com <mailto:aes256-gcm at openssh.com>
> <mailto:aes256-gcm at openssh.com>
> 
>>
> 
>> ·        aes128-gcm at openssh.com <mailto:aes128-gcm at openssh.com>
> <mailto:aes128-gcm at openssh.com>
> 
>>
> 
>> ·         aes256-ctr
> 
>>
> 
>> ·         aes192-ctr
> 
>>
> 
>> ·         aes128-ctr
> 
>>
> 
>>  
> 
>>
> 
>> *MACs*
> 
>>
> 
>> ·         hmac-sha2-512-etm at openssh.com
> <mailto:hmac-sha2-512-etm at openssh.com>
> 
>> <mailto:hmac-sha2-512-etm at openssh.com>
> 
>>
> 
>> ·         hmac-sha2-256-etm at openssh.com
> <mailto:hmac-sha2-256-etm at openssh.com>
> 
>> <mailto:hmac-sha2-256-etm at openssh.com>
> 
>>
> 
>> ·         umac-128-etm at openssh.com <mailto:umac-128-etm at openssh.com>
> <mailto:umac-128-etm at openssh.com>
> 
>>
> 
>> ·         hmac-sha2-512
> 
>>
> 
>> ·         hmac-sha2-256
> 
>>
> 
>>  
> 
>>
> 
>>  
> 
>>
> 
>>  
> 
>>
> 
>> We have the latest packages available from the “unstable” release tree
> 
>> installed…. But libssh2/1.4.2  is the problem…
> 
>>
> 
>>  
> 
>>
> 
>> If CURL is re-compiled with libssh2  1.8.0  the problem goes away
> 
>> immediately… but with 1.4.2 it just can’t complete
> 
>>
> 
>> negotiation with the above MAC/Cipher/KeyEx restrictions.
> 
>>
> 
>>  
> 
>>
> 
>> root at lonsett-p1 / # pkginfo | grep curl | grep CSW
> 
>>
> 
>> application CSWcurl                          curl - A command line
> 
>> tool and library for client-side URL transfers
> 
>>
> 
>> application CSWlibcurl4                      libcurl4 - Library for
> 
>> client-side URL transfers, libcurl.so.4
> 
>>
> 
>> application CSWlibcurl4-feature              libcurl4_feature -
> 
>> Full-features library for client-side URL transfers superseding
> 
>> libcurl.so.4
> 
>>
> 
>>  
> 
>>
> 
>> root at lonsett-p1 / # curl -V
> 
>>
> 
>> curl 7.63.0 (sparc-sun-solaris2.10) libcurl/7.63.0 OpenSSL/1.0.2o
> 
>> zlib/1.2.8 brotli/1.0.2 c-ares/1.10.0 libidn2/2.0.4 libpsl/0.19.1
> 
>> (+libidn2/2.0.4) libssh2/1.4.2 nghttp2/1.30.0 librtmp/2.3
> 
>>
> 
>> Release-Date: 2018-12-12
> 
>>
> 
>> Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps
> 
>> pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp
> 
>>
> 
>> Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM
> 
>> NTLM_WB SSL libz brotli TLS-SRP HTTP2 UnixSockets HTTPS-proxy PSL
> 
>> Metalink
> 
>>
> 
>>  
> 
>>
> 
>>  
> 
>>
> 
>> Thanks Again,
> 
>>
> 
>>
> 
>> Mark
> 
>>
> 
>>  
> 
>>
> 
>>  
> 
>>
> 
>> *From:*users
> 
>> [mailto:users-bounces+mabbott=bgcpartners.com at lists.opencsw.org] *On
> 
>> Behalf Of *CMH via users
> 
>> *Sent:* 24 January 2019 14:01
> 
>> *To:* users at lists.opencsw.org <mailto:users at lists.opencsw.org>
> 
>> *Cc:* CMH
> 
>> *Subject:* Re: Curl compiled with libssh2 - for Sparc Solaris 10
> 
>>
> 
>>  
> 
>>
> 
>> I would very interested in this as well.
> 
>>
> 
>> Hello Open CSW Team,
> 
>>
> 
>>  
> 
>>
> 
>> Please can you I beg one of you to compile a version of CURL for
> 
>> Solaris Sparc 10 using
> 
>>
> 
>> libssh2 1.8.0 or later.
> 
>>
> 
>>  
> 
>>
> 
>> The current “unstable” repository version still uses libssh2 v1.4.2
> 
>> and
> 
>>  unfortunately we
> 
>>
> 
>> are being restricted by the  MACs/Key Algos & Ciphers for SFTP
> 
>> connectivity next month
> 
>>
> 
>> and I’ve only managed to get it working on Fedora at home which has
> 
>> curl built with
> 
>>
> 
>> 1.8.0 libssh2 – so this is the key.
> 
>>
> 
>>  
> 
>>
> 
>> Doesn’t matter so much which version of Curl is compiled It just has
> 
>> to be compiled
> 
>>
> 
>> with 1.8.0 libssh2.
> 
>>
> 
>>  
> 
>>
> 
>> If you could help me here I would be v. v. grateful.
> 
>>
> 
>>  
> 
>>
> 
>> Thanks,
> 
>>
> 
>>  
> 
>>
> 
>> Mark
> 
>>
> 
>> ----------------------------------------------------------------------
> 
>> --
> 
>>
> 
>> CONFIDENTIAL
> 
>> An electronic communication(s)/message(s), including its contents and
> 
>> attachments, if any, may contain privileged or confidential
> 
>> information, or may be otherwise protected by work product immunity or
> 
>> other legal rules. No confidentiality or privilege is waived by any
> 
>> erroneously transmitted communication. Accessing, copying or re-using
> 
>> of information by non-intended or non-authorized recipients is
> 
>> prohibited. If you are not the named recipient please notify the
> 
>> sender and immediately delete this communication. You may not
> 
>> disseminate, distribute, or forward this message or disclose its
> 
>> contents to anybody else. Copyright and any other intellectual
> 
>> property rights in its contents are the sole property of BGC Partners
> 
>> Inc. and its affiliates (collectively, “BGC,” “we,” or “us”).
> 
>>
> 
>> MAY CONTAIN ERRORS AND/OR VIRUSES
> 
>> Electronic communications/messages cannot be guaranteed to be secure
> 
>> or error-free. The sender therefore does not accept liability for any
> 
>> errors or omissions in the contents of this message, which arise as a
> 
>> result of such transmission. If verification is required, please
> 
>> request a hard-copy version.
> 
>>
> 
>> Although we routinely screen for viruses, recipients should check this
> 
>> communications/message and any attachments for viruses. We make no
> 
>> representation or warranty as to the absence of viruses in this e-mail
> 
>> or any attachments. Please note that, to ensure regulatory compliance
> 
>> and for the protection of our customers and business, we may monitor
> 
>> and read e-mails sent to and from server(s) used by us.
> 
>>
> 
>> INFORMATION PURPOSES ONLY
> 
>> The information contained in this electronic communication/message and
> 
>> any attachments is for information purposes, and should not be
> 
>> regarded as an offer to sell, or a solicitation of an offer to buy,
> 
>> any security in any jurisdiction where such an offer or solicitation
> 
>> would be in violation of any local laws. It does not constitute a
> 
>> recommendation or take into account the particular investment
> 
>> objectives, financial conditions, or needs of specific investors. Any
> 
>> prices or data contained herein are indicative and do not represent
> 
>> where the underlying
> 
>> instrument(s) may trade in the market at any given point in time, nor
> 
>> does such price(s) represent a determination of the underlying value
> 
>> of a particular instrument(s). This information may be changed at any
> 
>> time without notice or obligation to update. BGC accepts no liability
> 
>> for any loss (whether direct, indirect or consequential) that may
> 
>> arise from any use of the information contained herein or derived
> 
>> herefrom. Reliance may not be placed on trade confirmations issued
> 
>> other than by our Operations Department.
> 
>>
> 
>> RETENTION
> 
>> Please note that any electronic communications/messages conducted
> 
>> within or through BGC systems is subject to monitoring, review,
> 
>> retention, and external production.
> 
>>
> 
>> BGC Financial LP is a broker-dealer registered with the U.S.
> 
>> Securities and Exchange, a member of FINRA and a member of SIPC.
> 
>>
> 
>> BGC Financial LP is a member of the National Futures Association as a
> 
>> swap firm and a futures commission merchant.
> 
>>
> 
>> BGC Derivatives Markets LP is a swap execution facility registered
> 
>> with the Commodity Futures Trading Commission.
> 
>>
> 
>> BGC Brokers LP ("BGCB") is authorised and regulated by the Financial
> 
>> Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under
> 
>> the laws of England (under Limited Partnership Act 1907 LP011453) and
> 
>> its VAT registration number is 577 406809. BGCB's registered office is
> 
>> at 12 Endeavour Square, London, E20 1JN. For any issues arising from
> 
>> this email please reply to the sender.
> 
>>
> 
>> BGCB appears on the FCA register under no 454814. The FCA register
> 
>> appears at www.fca.org.uk/register <http://www.fca.org.uk/register>
> 
>>
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.fca.org.uk_register&d=DwMF-g&c=3v6EBbtpnn9A7jIZYjOw6KN7Pe17WoimzcinOq2Xztg&r=h1BgflT2I7NyYPzaLZCy6lFcAOsJtijy_yb0p-xhBKE&m=6UhvTGJT4oaYbplOYIiAEB1wmtNeCWlXduRCMKiydyY&s=HLBtG5Vs2yr3LkPoLujS2pwquiIjikdY9D3t2f0eAVA&e=>.
> 
>> The FCA is a financial services industry regulator in the United
> 
>> Kingdom and is located at 12 Endeavour Square, London, E20 1JN.
> 
>>
> 
>> An individuals’ personal data under the GDPR - For further information
> 
>> about the way BGC entities (and relevant affiliates) within the
> 
>> European Economic Area (EEA) use your personal data please see our
> 
>> Third Party Privacy Notice at www.bgcpartners.com/notices/
> <http://www.bgcpartners.com/notices/>
> 
>> <http://www.bgcpartners.com/notices/> or at such other place as we may
> 
>> provide notice of from time to time.
> 
>> Marketing within the European Economic Area - BGC entities within the
> 
>> EEA may contact you about industry news, offers and information
> 
>> relating to their products and services which they think would be of
> 
>> interest to you. You can tell them you do not wish to receive such
> 
>> communications by contacting them at DPM at bgcpartners.com
> <mailto:DPM at bgcpartners.com> <mailto:DPM at bgcpartners.com>.
> 
>> For additional disclosures, please visit
> 
>> http://www.bgcpartners.com/disclaimers/
> 
>>
> 
>>
> 
>>
> 
>> --
> 
>>
> 
>> Systems Since 1948
> 
>>
> 
>> Craig M. Houck ><>
> 
>>
> 
>> Tech Hub/Computer Center
> 
>>
> 
>>    3rd Floor 332
> 
>>
> 
>>      607 777 6827
> 
>>
> 
>> We are only as good as the problems we solve!
> 
>>
> 
>> ----------------------------------------------------------------------
> 
>> --
> 
>> CONFIDENTIAL
> 
>> An electronic communication(s)/message(s), including its contents and
> 
>> attachments, if any, may contain privileged or confidential
> 
>> information, or may be otherwise protected by work product immunity or
> 
>> other legal rules. No confidentiality or privilege is waived by any
> 
>> erroneously transmitted communication. Accessing, copying or re-using
> 
>> of information by non-intended or non-authorized recipients is
> 
>> prohibited. If you are not the named recipient please notify the
> 
>> sender and immediately delete this communication. You may not
> 
>> disseminate, distribute, or forward this message or disclose its
> 
>> contents to anybody else. Copyright and any other intellectual
> 
>> property rights in its contents are the sole property of BGC Partners
> 
>> Inc. and its affiliates (collectively, “BGC,” “we,” or “us”).
> 
>>
> 
>> MAY CONTAIN ERRORS AND/OR VIRUSES
> 
>> Electronic communications/messages cannot be guaranteed to be secure
> 
>> or error-free. The sender therefore does not accept liability for any
> 
>> errors or omissions in the contents of this message, which arise as a
> 
>> result of such transmission. If verification is required, please
> 
>> request a hard-copy version.
> 
>>
> 
>> Although we routinely screen for viruses, recipients should check this
> 
>> communications/message and any attachments for viruses. We make no
> 
>> representation or warranty as to the absence of viruses in this e-mail
> 
>> or any attachments. Please note that, to ensure regulatory compliance
> 
>> and for the protection of our customers and business, we may monitor
> 
>> and read e-mails sent to and from server(s) used by us.
> 
>>
> 
>> INFORMATION PURPOSES ONLY
> 
>> The information contained in this electronic communication/message and
> 
>> any attachments is for information purposes, and should not be
> 
>> regarded as an offer to sell, or a solicitation of an offer to buy,
> 
>> any security in any jurisdiction where such an offer or solicitation
> 
>> would be in violation of any local laws. It does not constitute a
> 
>> recommendation or take into account the particular investment
> 
>> objectives, financial conditions, or needs of specific investors. Any
> 
>> prices or data contained herein are indicative and do not represent
> 
>> where the underlying
> 
>> instrument(s) may trade in the market at any given point in time, nor
> 
>> does such price(s) represent a determination of the underlying value
> 
>> of a particular instrument(s). This information may be changed at any
> 
>> time without notice or obligation to update. BGC accepts no liability
> 
>> for any loss (whether direct, indirect or consequential) that may
> 
>> arise from any use of the information contained herein or derived
> 
>> herefrom. Reliance may not be placed on trade confirmations issued
> 
>> other than by our Operations Department.
> 
>>
> 
>> RETENTION
> 
>> Please note that any electronic communications/messages conducted
> 
>> within or through BGC systems is subject to monitoring, review,
> 
>> retention, and external production.
> 
>>
> 
>> BGC Financial LP is a broker-dealer registered with the U.S.
> 
>> Securities and Exchange, a member of FINRA and a member of SIPC.
> 
>>
> 
>> BGC Financial LP is a member of the National Futures Association as a
> 
>> swap firm and a futures commission merchant.
> 
>>
> 
>> BGC Derivatives Markets LP is a swap execution facility registered
> 
>> with the Commodity Futures Trading Commission.
> 
>>
> 
>> BGC Brokers LP ("BGCB") is authorised and regulated by the Financial
> 
>> Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under
> 
>> the laws of England (under Limited Partnership Act 1907 LP011453) and
> 
>> its VAT registration number is 577 406809. BGCB's registered office is
> 
>> at 12 Endeavour Square, London, E20 1JN. For any issues arising from
> 
>> this email please reply to the sender.
> 
>>
> 
>> BGCB appears on the FCA register under no 454814. The FCA register
> 
>> appears at www.fca.org.uk/register <http://www.fca.org.uk/register>.
> The FCA is a financial services
> 
>> industry regulator in the United Kingdom and is located at 12
> 
>> Endeavour Square, London, E20 1JN.
> 
>>
> 
>> An individuals’ personal data under the GDPR - For further information
> 
>> about the way BGC entities (and relevant affiliates) within the
> 
>> European Economic Area (EEA) use your personal data please see our
> 
>> Third Party Privacy Notice at www.bgcpartners.com/notices/
> <http://www.bgcpartners.com/notices/> or at such
> 
>> other place as we may provide notice of from time to time.
> 
>> Marketing within the European Economic Area - BGC entities within the
> 
>> EEA may contact you about industry news, offers and information
> 
>> relating to their products and services which they think would be of
> 
>> interest to you. You can tell them you do not wish to receive such
> 
>> communications by contacting them at DPM at bgcpartners.com
> <mailto:DPM at bgcpartners.com>.
> 
>> For additional disclosures, please visit
> 
>> http://www.bgcpartners.com/disclaimers/
> 
>  
> 
> ------------------------------------------------------------------------
> CONFIDENTIAL
> An electronic communication(s)/message(s), including its contents and
> attachments, if any, may contain privileged or confidential information,
> or may be otherwise protected by work product immunity or other legal
> rules. No confidentiality or privilege is waived by any erroneously
> transmitted communication. Accessing, copying or re-using of information
> by non-intended or non-authorized recipients is prohibited. If you are
> not the named recipient please notify the sender and immediately delete
> this communication. You may not disseminate, distribute, or forward this
> message or disclose its contents to anybody else. Copyright and any
> other intellectual property rights in its contents are the sole property
> of BGC Partners Inc. and its affiliates (collectively, “BGC,” “we,” or
> “us”).
> 
> MAY CONTAIN ERRORS AND/OR VIRUSES
> Electronic communications/messages cannot be guaranteed to be secure or
> error-free. The sender therefore does not accept liability for any
> errors or omissions in the contents of this message, which arise as a
> result of such transmission. If verification is required, please request
> a hard-copy version.
> 
> Although we routinely screen for viruses, recipients should check this
> communications/message and any attachments for viruses. We make no
> representation or warranty as to the absence of viruses in this e-mail
> or any attachments. Please note that, to ensure regulatory compliance
> and for the protection of our customers and business, we may monitor and
> read e-mails sent to and from server(s) used by us.
> 
> INFORMATION PURPOSES ONLY
> The information contained in this electronic communication/message and
> any attachments is for information purposes, and should not be regarded
> as an offer to sell, or a solicitation of an offer to buy, any security
> in any jurisdiction where such an offer or solicitation would be in
> violation of any local laws. It does not constitute a recommendation or
> take into account the particular investment objectives, financial
> conditions, or needs of specific investors. Any prices or data contained
> herein are indicative and do not represent where the underlying
> instrument(s) may trade in the market at any given point in time, nor
> does such price(s) represent a determination of the underlying value of
> a particular instrument(s). This information may be changed at any time
> without notice or obligation to update. BGC accepts no liability for any
> loss (whether direct, indirect or consequential) that may arise from any
> use of the information contained herein or derived herefrom. Reliance
> may not be placed on trade confirmations issued other than by our
> Operations Department.
> 
> RETENTION
> Please note that any electronic communications/messages conducted within
> or through BGC systems is subject to monitoring, review, retention, and
> external production.
> 
> BGC Financial LP is a broker-dealer registered with the U.S. Securities
> and Exchange, a member of FINRA and a member of SIPC.
> 
> BGC Financial LP is a member of the National Futures Association as a
> swap firm and a futures commission merchant.
> 
> BGC Derivatives Markets LP is a swap execution facility registered with
> the Commodity Futures Trading Commission.
> 
> BGC Brokers LP ("BGCB") is authorised and regulated by the Financial
> Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under
> the laws of England (under Limited Partnership Act 1907 LP011453) and
> its VAT registration number is 577 406809. BGCB's registered office is
> at 12 Endeavour Square, London, E20 1JN. For any issues arising from
> this email please reply to the sender.
> 
> BGCB appears on the FCA register under no 454814. The FCA register
> appears at www.fca.org.uk/register. The FCA is a financial services
> industry regulator in the United Kingdom and is located at 12 Endeavour
> Square, London, E20 1JN.
> 
> An individuals’ personal data under the GDPR - For further information
> about the way BGC entities (and relevant affiliates) within the European
> Economic Area (EEA) use your personal data please see our Third Party
> Privacy Notice at www.bgcpartners.com/notices/ or at such other place as
> we may provide notice of from time to time.
> Marketing within the European Economic Area - BGC entities within the
> EEA may contact you about industry news, offers and information relating
> to their products and services which they think would be of interest to
> you. You can tell them you do not wish to receive such communications by
> contacting them at DPM at bgcpartners.com.
> For additional disclosures, please visit
> http://www.bgcpartners.com/disclaimers/



More information about the users mailing list