Call for testing: OpenSSH 10.4

[Damien Miller]

On Sun, 5 Jul 2026, Dmitry Belyavskiy wrote:

> Dear Damien,
> 
> On Sun, Jul 5, 2026 at 2:11 AM Damien Miller <djm at mindrot.org> wrote:
> 
> 
>       Redhat's patch to sshd has it attempt an extra rsa/sha1
>       signature per
>       connection because of a lack of a better way to do it. RSA
>       signatures
>       aren't super expensive, but this seems like a wasteful way to
>       find out
>       (effectively) whether a flag has been set.
> 
> 
> Is it really per-connection? I was sure it happens in the main sshd process
> and then inherited by a child.

No, at least in Fedroa, it happens in sshd-session, which is per-session

https://src.fedoraproject.org/rpms/openssh/blob/rawhide/f/0041-openssh-8.7p1-nohostsha1proof.patch#_336