Contributed by pitrh on 2014-04-30 from the SSH! SSLide closer! dept.

It's a move that has been mulled and polished on and off for a while before the Heartbleed kerfuffle that lead to our own LibreSSL fork, but with this commit Markus Friedl (markus@) has made linking with OpenSSL optional for building OpenSSH.

CVSROOT: /cvs Module name: src Changes by: markus@cvs.openbsd.org 2014/04/29 12:01:49 Modified files: usr.bin/ssh : Makefile.inc auth.c authfd.c authfile.c bufaux.c cipher.c cipher.h hostfile.c kex.c key.c mac.c monitor.c monitor_wrap.c myproposal.h packet.c roaming_client.c ssh-agent.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-pkcs11.h ssh.c sshconnect.c sshconnect2.c sshd.c usr.bin/ssh/lib: Makefile usr.bin/ssh/ssh: Makefile usr.bin/ssh/sshd: Makefile Log message: make compiling against OpenSSL optional (make OPENSSL=no); reduces algorithms to curve25519, aes-ctr, chacha, ed25519; allows us to explore further options; with and ok djm

This could mean a slimmer, standalone OpenSSH is on the horizon, but at this point it's likely more important that it makes life easier the OpenSSH developers when/if they want to explore other options to improve the build system and OpenSSH itself.