File openssh-7.2p2-fips_fixes.patch of Package openssh.29886
From 6bca2065c3d77d33ea8b398ccc7e67d6adafdafe Mon Sep 17 00:00:00 2001
From: Old openssh patches <pcerny@suse.com>
Date: Tue, 25 Oct 2022 18:53:36 +0200
Subject: [PATCH] openssh-7.2p2-fips_fixes
# HG changeset patch
# Parent cb502e7e796ac9289a571167a97ad9ec91562efb
Silent warnings about unsupported KEX algorithms - synchronize behaviour with
that of MAC and cipher checking code paths.
bsc#1006166
---
kex.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/kex.c b/kex.c
index 1fadba48..1d6425be 100644
--- a/kex.c
+++ b/kex.c
@@ -197,7 +197,10 @@ kex_names_valid(const char *names)
for ((p = strsep(&cp, ",")); p && *p != '\0';
(p = strsep(&cp, ","))) {
if (kex_alg_by_name(p) == NULL) {
+ /* do not complain here - MACs and ciphers checks
+ * are silent here
error("Unsupported KEX algorithm \"%.100s\"", p);
+ */
free(s);
return 0;
}
--
2.38.0