Hello Al,

On Fri, 28 Nov 2003, admin@datazap.net wrote:

> I seem to have a very unusual problem. I updated openssl 0.9.6k and now
> anoncvs will not work. If I go to an older version of the pkgsrc, and
> rebuild openssl 0.9.6g it works fine. But here is where I have a
> problem. Wget will not work with openssl 0.9.6g. I seem to get an error,
> and I have been having this problem for a long time.
>
> I spent some reading on the openssl.org, but I found no solution.
> Although, I did find that version 0.9.6l was released. So, I used cvs
> (with openssl 0.9.6g) to download the lastest pkgsrc, and then updated
> both openssh and openssl. This did not help!

I am not sure what the problem is. But can you try rebuilding devel/cvs
and net/wget and see if the problem goes away?

> I also looked at moving to freSSH. Has anyone had any luck using it? When

Yes. I use FreSSH on a few boxes (NetBSD and Linux).

> I built it, I didn't get a config file, or a file in rc.d. Infact, I
> didn't even get a man page. So I went to the website (fressh.org) and I
> couldn't find any documentation there either.

The key file is at /etc/ssh_host_key (or /etc/sshd.key). You can create
with fressh-keygen or you could use the OpenSSH keys. Just run fresshd to
start it. You could put in your /etc/rc.local to start.

Some changes for fressh were made in pkgsrc recently too. It is not really
supported anymore ... I'd like someone to pick it up and work on it some
more. I was told that the fressh CVS has a lot more code that was never
released.

(I also have several patches that I need to look at again.)

Also, if I understand correctly, their versions of "fishblow" and "des3"
are reimplementations that fix some protocol 1 flaws. (But you have to use
with a client that supports that special functionality.)

   Jeremy C. Reed
   http://bsd.reedmedia.net/