Overview
Request 765553 revoked
- Add openssh-8.0p1-pkcs11-uri.patch, which is required for using hardware
modules with many keys. Without the ability to select keys for the agent
or per connection at best connections take long due to SSH trying all
available keys, and at worst connections are refused due to exceeding
the maximum amount of authentication attempts with invalid keys.
Request History
bhwachter created request
- Add openssh-8.0p1-pkcs11-uri.patch, which is required for using hardware
modules with many keys. Without the ability to select keys for the agent
or per connection at best connections take long due to SSH trying all
available keys, and at worst connections are refused due to exceeding
the maximum amount of authentication attempts with invalid keys.
scarabeus_iv declined request
looks no longer mergable.
bhwachter revoked request
The source package 'openssh' has been removed
is the patch somewhere tracked? en route to upstream or anything?
I'd expect it to go upstream eventually (a lot of stuff fedora carried patches for became available with 8.0), though I'm not sure how actively they're pushing it.
The patch is in their openssh package git repo: https://src.fedoraproject.org/rpms/openssh/blob/master/f/openssh-8.0p1-pkcs11-uri.patch
@hpjansson, @vitezslav_cizek: review reminder