From: Chris Wincentsen (CWincentsen@csustan.edu)
Date: Thu Jul 14 2005 - 16:51:29 EDT
Well, I guess no one else knew either! (I didn't get any responses.)
However, after working with Frank da Cruz of the Kermit Project (Columbia
University), I was able to modify the kermit makefile to build a version of
Kermit with SSL. The main problem was my mixing up of CFLAGS and KFLAGS.
In addition to the changes for the location of the ssl related directories,
the ck_ssl.c file needed to be modified to comment out the reference to
inet_aton, which conflicts with the standard Tru64 definition in
/usr/include/arpa/inet.h.
Here is the slightly modified entry for "osf":
#OSF/1
osf:
$(MAKE) xermit KTARGET=$${KTARGET:-$(@)} \
"CFLAGS= -DBSD4 -DOSF -D_BSD -DTCPSOCKET -DCK_ANSIC -DSIG_V \
-DCK_CURSES -DCK_RTSCTS -DFNFLOAT $(KFLAGS)" \
"LNKFLAGS = -s" "LIBS = -lbsd -lcurses -ltermcap -lm $(LIBS)"
And here is the new entry for tru64-51b+openssl:
# Added 5.1b version with OpenSSL - CDW 7-14-2005...
tru64-51b+openssl:
@echo Making C-Kermit $(CKVER) for Tru64 UNIX 5.1b
@echo including OpenSSL...
$(MAKE) CC=$(CC) CC2=$(CC2) osf KTARGET=$${KTARGET:-$(@)} \
"KFLAGS= -DTRU64 -DOSF50 -DOSF51A -DOSF51B -DHDBUUCP \
-unsigned -std1 -O3 -Olimit 2400 \
-DCK_AUTHENTICATION -DCK_SSL $(SSLINC) $(KFLAGS)" \
"LIBS= $(SSLLIB) -lssl -lcrypto"
Built and runs on Tru64 UNIX 5.1b (2650) on an Alpha ES45.
Chris
Chris Wincentsen
UNIX Systems Administrator
Office of Information Technology
CSU Stanislaus - Turlock, CA
(209) 667-3732 CWincentsen@csustan.edu
> ----------
> From: Chris Wincentsen
> Sent: Wednesday, July 6, 2005 1:50 PM
> To: 'tru64-unix-managers@ornl.gov'
> Subject: ssl ftp on Tru64 5.1b - Kermit?
>
> Hi,
>
> I need to set up an ftp process via ssl. This is completely new territory
> for me, so any help will be appreciated. Also, sftp, which uses ssh, is
> different and can't be used for the particular application - it requires
> an
> ssl setup. (I didn't realize that ssl and ssh were different until I
> started researching this project.)
>
> I found and downloaded a current version of Kermit (8.0), which indicated
> that it could be used for ssl ftp. I can compile plain Kermit, without
> SSL
> and that works fine. However, I can't seem to get the right combination
> of
> parameters to get the SSL security working. There was no entry in the
> Kermit "make" file for Tru64 5.1b or 5.1b with ssl or 5.1b with any other
> special security features, for that matter. Here are the changes I made
> to
> the original Kermit make file, if it helps you see something I've done
> wrong
> or left out (various experiments I tried to the make command are commented
> out)...
>
> > diff makefile makefile.orig
>
> 748,749c748,749
> < SSLLIB=-L/usr/ssl/lib
> < SSLINC=-I/usr/ssl/include
> ---
> > SSLLIB=-L$(sslroot)/ssl/lib
> > SSLINC=-I$(sslroot)/ssl/include
> 2190c2190
> < "LNKFLAGS = -s" "LIBS = -lbsd -lcurses -ltermcap -lm $(LIBS)"
> ---
> > "LNKFLAGS = -s" "LIBS = -lbsd -lcurses -ltermcap -lm"
> 2290,2305d2289
> <
> < # Added 5.1b version with OpenSSL - CDW 5-13-2005...
> < tru64-51b+openssl:
> < @echo Making C-Kermit $(CKVER) for Tru64 UNIX 5.1b
> < @echo including OpenSSL...
> < $(MAKE) CC=$(CC) CC2=$(CC2) osf KTARGET=$${KTARGET:-$(@)} \
> < "KFLAGS= -DTRU64 -DOSF50 -DOSF51A -DOSF51B -DHDBUUCP \
> < -unsigned -std1 -O3 -Olimit 2400 $(KFLAGS)" \
> < "CFLAGS= -DCK_AUTHENTICATION -DCK_SSL"
> <
> < # "CFLAGS= -DCK_AUTHENTICATION -DCK_SSL $(SSLINC)" \
> < # "LIBS= $(SSLLIB) -lssl -lcrypto"
> <
> < # "CFLAGS= -DCK_AUTHENTICATION -DCK_SSL -I/usr/ssl/include"
> < # "CFLAGS= -DCK_AUTHENTICATION -DCK_SSL"
> < # "CFLAGS= -DCK_AUTHENTICATION -DCK_SSL $(SSLINC)"
>
>
> Has anyone else used Kermit with ssl on Tru64 5.1b? How did you do it?
> Or
> - is there another ssl ftp program available (preferably free) that you
> have
> used instead (and how did you install/configure it)?
>
> Thanks for any advice or suggestions you may have.
> Chris
>
> Chris Wincentsen
> UNIX Systems Administrator
> Office of Information Technology
> CSU Stanislaus - Turlock, CA
> (209) 667-3732 CWincentsen@csustan.edu
>
>
>
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:50:21 EDT