Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 25 additions & 5 deletions wolfProvider/openssh/README.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,25 @@
These patches are needed to run a full openssh test suite with wolfProvider.
For V_9_9_P1 testing use the patch `openssh-V_9_9_P1-wolfprov.patch`
For V_10_0_P2 testing use the patch `openssh-V_10_0_P2-wolfprov.patch`
For V_10_0_P2 or V_9_9_P1 FIPS testing support use the patch `openssh-FIPS-wolfprov.patch`
Note: use either the FIPS patch or the normal ones not both.
These patches adapt the OpenSSH regress test suite to run against
wolfProvider. Pick the one matching the OpenSSH source you are
exercising, and pick FIPS or non-FIPS to match the wolfProvider
build mode.

Non-FIPS:

- `openssh-V_9_9_P1-wolfprov.patch` — upstream openssh-portable, tag
`V_9_9_P1`.
- `openssh-V_10_0_P2-wolfprov.patch` — upstream openssh-portable, tag
`V_10_0_P2`.

FIPS:

- `openssh-V_9_6_P1-FIPS-wolfprov.patch` — upstream openssh-portable,
tag `V_9_6_P1`.
- `openssh-RHEL-9.9p1-FIPS-wolfprov.patch` — CentOS Stream 10 / RHEL 10
dist-git build of openssh-9.9p1 (the RHEL patch set adds the
SSHKDF-routing patch that makes wolfProvider's SSHKDF actually
fire during KEX).
- `openssh-RHEL-10.2p1-FIPS-wolfprov.patch` — Fedora 44 dist-git
build of openssh-10.2p1 (same RHEL patch set, newer openssh).

Use either the FIPS patch or the non-FIPS one for a given OpenSSH
version, not both.