[patch] Add dsa-keys USE flag.

openssh-9.8_p1-r2.ebuild.patch (text/plain), 1.13 KB, created by Patrice Levesque on 2024-10-11 01:04:22 UTC

--- /path/to/a/openssh-9.8_p1-r2.ebuild	2024-10-10 15:32:54.723358272 -0400
+++ /path/to/b/openssh-9.8_p1-r2.ebuild	2024-10-10 20:49:46.056137543 -0400
@@ -22,7 +22,7 @@
 SLOT="0"
 KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86 ~amd64-linux ~x86-linux ~arm64-macos ~ppc-macos ~x64-macos ~x64-solaris"
 # Probably want to drop ssl defaulting to on in a future version.
-IUSE="abi_mips_n32 audit debug kerberos ldns libedit livecd pam +pie security-key selinux +ssl static test xmss"
+IUSE="abi_mips_n32 audit debug dsa-keys kerberos ldns libedit livecd pam +pie security-key selinux +ssl static test xmss"
 
 RESTRICT="!test? ( test )"
 
@@ -205,8 +205,14 @@
 		$(use_with security-key security-key-builtin)
 		$(use_with ssl openssl)
 		$(use_with ssl ssl-engine)
+
+		# Stopgap measure.  Removing DSA support entirely is planned for the
+		# first OpenSSH release of 2025 according to
+		# https://www.openssh.com/releasenotes.html
+		$(use_enable dsa-keys)
 	)
 
+
 	if use elibc_musl; then
 		# musl defines bogus values for UTMP_FILE and WTMP_FILE (bug #753230)
 		myconf+=( --disable-utmp --disable-wtmp )