Changes in chapter08/openssl.xml [fd409751:ed48f326]

File:

• chapter08/openssl.xml (modified) (1 diff)

chapter08/openssl.xml

@@ -100 +100 @@
         <emphasis>when upgrading to a version with the same MAJOR version
         number</emphasis>.
+      </para>
+
+      <!-- https://bugzilla.mindrot.org/show_bug.cgi?id=3548 -->
+      <para>
+        If <application>OpenSSH</application> is installed, it will be an
+        exception of the general rule above.  It contains an
+        over-restrictive OpenSSL version check, so both SSH client and SSH
+        server will refuse to start if OpenSSL
+        is updated with MAJOR version number unchanged but MINOR version
+        number changed.  You need to rebuild
+        <application>OpenSSH</application> after such an upgrade.
+        <emphasis role='bold'>If <application>OpenSSH</application> is being
+        used to access the system, you must rebuild and reinstall it
+        after upgrading OpenSSL to a new MINOR version number before logout
+        or you won't be able to login via SSH anymore.</emphasis>
       </para>