Call for testing: OpenSSH 8.9

Corinna Vinschen
Fri, 11 Feb 2022 10:44:05 -0000

On Feb 10 15:18, Damien Miller wrote:
> Hi,
>
> OpenSSH 8.9p1 is almost ready for release, so we would appreciate testing
> on as many platforms and systems as possible. This is a bugfix release.

Builds OOTB on Cygwin x86_64, almost all tests pass, except a single
test in hostkey-agent:

-------------
  debug1: kex: host key algorithm: (no match)
  Unable to negotiate with UNKNOWN port 65535: no matching host key type found.
  Their offer:
  ssh-ed25519-cert-v01 at openssh.com,rsa-sha2-512-cert-v01 at
openssh.com,rsa-sha2-256-
  cert-v01 at openssh.com,ssh-rsa-cert-v01 at openssh.com,ssh-dss-cert-v01 at
openssh.com,e
  cdsa-sha2-nistp256-cert-v01 at openssh.com,ecdsa-sha2-nistp384-cert-v01 at
openssh.com
  ,ecdsa-sha2-nistp521-cert-v01 at openssh.com^M
  FAIL: cert type sk-ecdsa-sha2-nistp256-cert-v01 at openssh.com failed
  FAIL: bad SSH_CONNECTION key type sk-ecdsa-sha2-nistp256-cert-v01 at
openssh.com
-------------

I wonder why sk-ecdsa-sha2-nistp256-cert-v01 at openssh.com is not in the
above list of cert type offers.  What explanation could that have?

I'm building OPenSSH exactly as if I create a distro build, using the
following configuration options:

  --with-libedit
  --with-xauth=/usr/bin/xauth
  --disable-strip
  --without-hardening
  --with-security-key-builtin


Thanks,
Corinna