rapier1 / hpn-ssh

HPN-SSH based on OpenSSH
https://psc.edu/hpn-ssh-home
Other
333 stars 45 forks source link

cipher: Restore DisableMTAES capability to resolve FIPS SIGSEGV. #86

Closed klardotsh closed 4 months ago

klardotsh commented 5 months ago

This restores the functionality provided in 9ed8887c95b1a892b988c3dd30f1f5e7e48e0b56 and 4a535c4ac4d871a13798340b32f838f6fd346ddd, but was then removed in the 9.2 -> 9.3 rebase process, as I mentioned in the FIPS bug thread. In my preliminary testing, this patch allows our FIPS servers to talk to each other happily, so long as both sides of the conversation use DisableMTAES=yes. We (ServiceNow) will do some more testing on this as we can, but I'm submitting this upstream for the greater benefit, and hopefully to get some more-qualified-than-my-own eyes on this :)