ssh checksum error

[lists at prwdot.org (Peter R. Wood)]

Bill Horne had asked for a 'HOWTO' on upgrading ssh.  This certainly isn't a
polished HOWTO doc, but rather a general description of how I upgraded to
the latest OpenSSH on my Linux box. This was done on a Mandrake 8.0/PowerPC
system, so if you are using Debian/RedHat/Slackware YMMV.

1) Determine the current version of your OpenSSH packages:
[root at woburn root]# ssh -V
OpenSSH_3.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090600f
[root at woburn root]# sshd -V
sshd: option requires an argument -- V
sshd version OpenSSH_3.1p1
(there is no explicit version command for sshd, so just run it that way)

If the versions are less than 3.1p1, then you need to upgrade. Also, if the
version is something other than OpenSSH, then you will probably need to
follow a slightly different upgrade path, and this document may not be as
much use to you.

To upgrade, proceed as follows.

2) Obtain the latest packages for your distribution. If you are using
Debian, you might try doing an 'apt-get openssh'. If you're using Mandrake,
try 'urpmi openssh'.  If you're using RedHat, hopefully you are using
up2date, so just run that and it should already be alerting you to the new
packages.  If you don't wish to go the auto-update route, look for the
packages at your favorite package repository.  Personally, I downloaded them
from rpmfind.net:

*Downloading using rpmfind.net*
a) lynx http://rpmfind.net/
b) search for 'openssh'
c) newer packages are at the top, search for a package matching your
distribution and architecture. I found a Mandrake Cooker package for ppc
d) download the rpm
e) back up to b) and repeat for 'openssh-clients' and 'openssh-server'

*I don't know where to find packages for non-rpm-based distros, perhaps a
Debianite could chime in here, for those who opt not to use apt-get...*

3) Once downloaded, install the packages with your package management
utility. For rpm based systems, rpm -Uvh openssh* will do the job.

4) The scripts contained in the rpm's *should* restart the ssh daemon, but
just in case, restart it manually with a kill -HUP or by using your system's
sshd initscript (/etc/rc.d/init.d/sshd restart in my case)

5) Your new ssh server should be all set.

I should also mention a couple things here:

If you have time, you can download the openssh sources and build the
distribution yourself. I won't cover that here. But you can get the source
at:

http://www.openssh.org/

Look down the left side of the page for your OS, and there will be links to
source on those pages.

Also, just so you can't say I didn't warn you, you should probably check the
md5 signatures of the packages you download, especially for stuff that is
supposed to provide you with security.  Mandrake for example has a site
called www.mandrakesecure.net - it provides MD5 sums for its updated
packages. To check your md5sum, download the package, and run the command
"md5sum <packagename>".  It may take a while depending on the size of the
package, but in the end you will be provided with a string of characters.
Compare that string to the one provided by your package vendor. They should
be the same. If they're not, try downloading the file again from an
alternate site.


> Peter,
>
> Please, please, provide a HOWTO so those of us running 2.5.2p1 may
benefit.
>
> Bill
>