Some non-terminating processes were listening on ports.
On sshd startup, we check whether signing using the SHA1 for signing is
On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
On a client side we permit SHA2-based proofs from server when requested SHA1
We fallback to SHA2 if SHA1 signatures is not available on the client side
We skip dss-related tests (they don't work without SHA1).
FIPS compliance efforts for dh, ecdh and signing

Resolve possible self-DoS with some clients

Do not try to use SHA1 for host key ownership proof when we don't support it server-side

Add sk-dummy subpackage for test purposes

Fix one-byte overflow in SSH banner processing
Fix double free() in error path

Build fix after OpenSSL rebase

Set minimal value of RSA key length via configuration option - support both names

Set minimal value of RSA key length via configuration option

Avoid spirous message on connecting to the machine with ssh-rsa keys
Set minimal value of RSA key length via configuration option

IBMCA workaround

Fix openssh-8.7p1-scp-clears-file.patch

FIX pam_ssh_agent_auth auth for RSA keys

Fix new coverity issues

Disable ed25519 and ed25519-sk keys in FIPS mode

Don't propose disallowed algorithms during hostkey negotiation

Disable ed25519 and ed25519-sk keys in FIPS mode