Skip to content

Conversation

@fscheiner
Copy link
Member

@fscheiner
Copy link
Member Author

@msalle, @ellert, @maarten-litmaath:

So here's the PR for our new in-tree GSI-OpenSSH based on the version currently in Fedora 42 (aka stable).
Getting here took unnecessarily long, sorry for that.

Special thanks go to @ellert for updating the HPN version to 18.6. I wondered multiple times over code removals when patching the code up for inclusion. But I didn't notice until testing that this uses a newer HPN version than before. :-)

This is so far only tested on Rocky Linux 8, testing on other distros is welcome, also if just tested to build and install there.

Rocky Linux 8

[johndoe@gridftp-5 gsi-openssh-9.9p1-testing]$ sudo ~/bin/test-gss-kex-for-gsi-openssh.bash gridftp-5.machine-hall.org johndoe2
gsisshd: OpenSSH_9.9p1c-GSI_hpn18.6.0 GSI, OpenSSL 1.1.1k  FIPS 25 Mar 2021
gsissh: OpenSSH_9.9p1c-GSI_hpn18.6.0 GSI, OpenSSL 1.1.1k  FIPS 25 Mar 2021

Wait 3 seconds for startup of gsisshd ...

gss-gex-sha1- OK ( plus johndoe => johndoe2 )
gss-group1-sha1- OK ( plus johndoe => johndoe2 )
gss-group14-sha256- OK ( plus johndoe => johndoe2 )
gss-nistp256-sha256- OK ( plus johndoe => johndoe2 )
gss-curve25519-sha256- OK ( plus johndoe => johndoe2 )
gss-group16-sha512- OK ( plus johndoe => johndoe2 )

@fscheiner fscheiner force-pushed the add-gsi-openssh-9.9-from-fedora-42-current-stable branch from acd07db to 65ef40c Compare October 12, 2025 21:14
@ellert ellert self-requested a review October 13, 2025 08:30
@fscheiner fscheiner merged commit 9765d71 into gridcf:master Oct 13, 2025
18 of 24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants