20-03-LTS-SP1 支持国密算法补丁编译失败

**20.03-LTS-SP1 openssh 支持国密算法测试失败**

**一、缺陷信息**

**内核信息：**
Linux localhost.localdomain 4.19.90-2305.1.0.0199.56.uel20.x86_64 #1 SMP Fri May 12 19:23:49 CST 2023 x86_64 x86_64 x86_64 GNU/Linux

**缺陷归属组件：**
openssh

**缺陷归属的版本：**
[root@localhost openeuler-pkg]# rpm -qa | grep openssh 
openssh-help-8.2p1-9.oe1.noarch
openssh-clients-8.2p1-9.oe1.x86_64
openssh-8.2p1-9.oe1.x86_64
openssh-server-8.2p1-9.oe1.x86_64

**缺陷简述：**
我需要将openssh支持国密算法的补丁backport到openssh-8.2p1版本，
根据这个PR https://gitee.com/src-openeuler/openssh/commit/e76c6bad3d81b29e8785950301d6bf863298d97a
来看，最新的提交是在openssh-8.2p1-17版本，但是这个包在外网镜像源中无法找到该版本的包
在20.03-LTS-SP3源中只能找到 openssh-8.2p1-15版本。

所以我这边将补丁合入到本地环境中编译测试，发现make tests失败，报错信息中有一个异常信息
/root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd.log
ssh_dispatch_run_fatal: Connection from UNKNOWN port 65535: error in libcrypto [preauth]
不知道为什么这里会连接65535端口

**【环境信息】**
硬件信息

软件信息
- OS版本及分支信息
uos 1060e

**【问题复现步骤】**，请描述具体的操作步骤

**【实际结果】**，请描述出问题的结果和影响
**【其他相关附件信息】**
比如系统message日志/组件日志、dump信息、图片等

### kextype.sh 失败日志
++ /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-log-wrapper.sh -F /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh_proxy -o KexAlgorithms=sntrup4591761x25519-sha512@tinyssh.org x true
++ '[' 0 -ne 0 ']'
++ for k in `${SSH} -Q kex`
++ verbose 'kex sm2-sm3'
++ start_debug_log kex sm2-sm3
++ echo 'trace: kex' sm2-sm3
++ echo 'trace: kex' sm2-sm3
++ echo 'trace: kex' sm2-sm3
++ '[' X '!=' Xyes ']'
++ echo 'kex sm2-sm3'
kex sm2-sm3
++ for i in $tries
++ /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-log-wrapper.sh -F /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh_proxy -o KexAlgorithms=sm2-sm3 x true
++ '[' 255 -ne 0 ']'
++ fail 'ssh kex sm2-sm3'
++ save_debug_log 'FAIL: ssh kex sm2-sm3'
++ echo FAIL: ssh kex sm2-sm3
++ echo FAIL: ssh kex sm2-sm3
++ echo FAIL: ssh kex sm2-sm3
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/regress.log
++ echo
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh.log
++ echo
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd.log
++ echo
++ RESULT=1
++ echo 'ssh kex sm2-sm3'
ssh kex sm2-sm3
++ test x '!=' x
++ for i in $tries
++ /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-log-wrapper.sh -F /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh_proxy -o KexAlgorithms=sm2-sm3 x true
++ '[' 255 -ne 0 ']'
++ fail 'ssh kex sm2-sm3'
++ save_debug_log 'FAIL: ssh kex sm2-sm3'
++ echo FAIL: ssh kex sm2-sm3
++ echo FAIL: ssh kex sm2-sm3
++ echo FAIL: ssh kex sm2-sm3
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/regress.log
++ echo
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh.log
++ echo
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd.log
++ echo
++ RESULT=1
++ echo 'ssh kex sm2-sm3'
ssh kex sm2-sm3
++ test x '!=' x
++ for i in $tries
++ /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-log-wrapper.sh -F /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh_proxy -o KexAlgorithms=sm2-sm3 x true
++ '[' 255 -ne 0 ']'
++ fail 'ssh kex sm2-sm3'
++ save_debug_log 'FAIL: ssh kex sm2-sm3'
++ echo FAIL: ssh kex sm2-sm3
++ echo FAIL: ssh kex sm2-sm3
++ echo FAIL: ssh kex sm2-sm3
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/regress.log
++ echo
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh.log
++ echo
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd.log
++ echo
++ RESULT=1
++ echo 'ssh kex sm2-sm3'
ssh kex sm2-sm3
++ test x '!=' x
++ for i in $tries
++ /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-log-wrapper.sh -F /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh_proxy -o KexAlgorithms=sm2-sm3 x true
++ '[' 255 -ne 0 ']'
++ fail 'ssh kex sm2-sm3'
++ save_debug_log 'FAIL: ssh kex sm2-sm3'
++ echo FAIL: ssh kex sm2-sm3
++ echo FAIL: ssh kex sm2-sm3
++ echo FAIL: ssh kex sm2-sm3
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/regress.log
++ echo
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh.log
++ echo
++ cat /root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd.log
++ echo
++ RESULT=1
++ echo 'ssh kex sm2-sm3'
ssh kex sm2-sm3
++ test x '!=' x
+ cleanup
+ '[' x '!=' x ']'
+ '[' x '!=' x ']'
+ stop_sshd
+ '[' -f /root/rpmbuild/BUILD/openssh-8.2p1/regress/pidfile ']'
+ '[' x '!=' x ']'
+ '[' 1 -eq 0 ']'
+ echo failed login with different key exchange algorithms
failed login with different key exchange algorithms
+ exit 1

### /root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd.log
trace: kex sm2-sm3
debug1: inetd sockets after dupping: 5, 6
Connection from UNKNOWN port 65535 on UNKNOWN port 65535
debug1: Local version string SSH-2.0-OpenSSH_8.2
debug1: Remote protocol version 2.0, remote software version OpenSSH_8.2
debug1: match: OpenSSH_8.2 pat OpenSSH* compat 0x04000000
debug2: fd 5 setting O_NONBLOCK
debug2: fd 6 setting O_NONBLOCK
debug3: ssh_sandbox_init: preparing seccomp filter sandbox
debug2: Network child is on pid 276325
debug3: preauth child monitor started
debug1: SELinux support disabled [preauth]
debug3: privsep user:group 74:74 [preauth]
debug1: permanently_set_uid: 74/74 [preauth]
debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
debug3: append_hostkey_type: ssh-dss key not permitted by HostkeyAlgorithms [preauth]
debug3: append_hostkey_type: sm2 key not permitted by HostkeyAlgorithms [preauth]
debug1: list_hostkey_types: ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com [preauth]
debug3: send packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT sent [preauth]
debug3: receive packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT received [preauth]
debug2: local server KEXINIT proposal [preauth]
debug2: KEX algorithms: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,sntrup4591761x25519-sha512@tinyssh.org,sm2-sm3 [preauth]
debug2: host key algorithms: ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com [preauth]
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: compression ctos: none,zlib@openssh.com [preauth]
debug2: compression stoc: none,zlib@openssh.com [preauth]
debug2: languages ctos:  [preauth]
debug2: languages stoc:  [preauth]
debug2: first_kex_follows 0  [preauth]
debug2: reserved 0  [preauth]
debug2: peer client KEXINIT proposal [preauth]
debug2: KEX algorithms: sm2-sm3,ext-info-c [preauth]
debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa [preauth]
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: compression ctos: none,zlib@openssh.com,zlib [preauth]
debug2: compression stoc: none,zlib@openssh.com,zlib [preauth]
debug2: languages ctos:  [preauth]
debug2: languages stoc:  [preauth]
debug2: first_kex_follows 0  [preauth]
debug2: reserved 0  [preauth]
debug1: kex: algorithm: sm2-sm3 [preauth]
debug1: kex: host key algorithm: ecdsa-sha2-nistp256 [preauth]
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
debug1: kex: sm2-sm3 need=64 dh_need=64 [preauth]
debug3: mm_request_send entering: type 120 [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 120
debug3: mm_request_send entering: type 121
debug3: mm_request_receive_expect entering: type 121 [preauth]
debug3: mm_request_receive entering [preauth]
debug1: kex: sm2-sm3 need=64 dh_need=64 [preauth]
debug3: mm_request_send entering: type 120 [preauth]
debug3: mm_request_receive_expect entering: type 121 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 120
debug3: mm_request_send entering: type 121
debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
debug3: receive packet: type 30 [preauth]
debug3: mm_sshkey_sign entering [preauth]
debug3: mm_request_send entering: type 6 [preauth]
debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
debug3: mm_request_receive_expect entering: type 7 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 6
debug3: mm_answer_sign
debug3: mm_answer_sign: KEX signature 0x55845f25cfc0(99)
debug3: mm_request_send entering: type 7
debug2: monitor_read: 6 used once, disabling now
debug3: send packet: type 31 [preauth]
ssh_dispatch_run_fatal: Connection from UNKNOWN port 65535: error in libcrypto [preauth]
debug1: do_cleanup [preauth]
debug3: mm_request_send entering: type 124 [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 124
debug1: monitor_read_log: child log fd closed
debug3: mm_request_receive entering
debug1: do_cleanup
debug1: Killing privsep child 276325
FAIL: ssh kex sm2-sm3

### /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh.log
debug1: Executing proxy command: exec env SSH_SK_HELPER="/root/rpmbuild/BUILD/openssh-8.2p1/ssh-sk-helper" sh /root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd-log-wrapper.sh /root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd.log /root/rpmbuild/BUILD/openssh-8.2p1/sshd -i -f /root/rpmbuild/BUILD/openssh-8.2p1/regress/sshd_proxy
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-ed25519 type 3
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-ed25519-cert type -1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/sk-ssh-ed25519@openssh.com type 14
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/sk-ssh-ed25519@openssh.com-cert type -1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-rsa type 0
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-rsa-cert type -1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-dss type 1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ssh-dss-cert type -1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ecdsa-sha2-nistp256 type 2
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ecdsa-sha2-nistp256-cert type -1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ecdsa-sha2-nistp384 type 2
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ecdsa-sha2-nistp384-cert type -1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ecdsa-sha2-nistp521 type 2
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/ecdsa-sha2-nistp521-cert type -1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/sk-ecdsa-sha2-nistp256@openssh.com type 12
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/sk-ecdsa-sha2-nistp256@openssh.com-cert type -1
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/sm2 type 8
debug1: identity file /root/rpmbuild/BUILD/openssh-8.2p1/regress/sm2-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.2
debug1: Remote protocol version 2.0, remote software version OpenSSH_8.2
debug1: match: OpenSSH_8.2 pat OpenSSH* compat 0x04000000
debug2: fd 8 setting O_NONBLOCK
debug2: fd 7 setting O_NONBLOCK
debug1: Authenticating to 127.0.0.1:4242 as 'root'
debug1: using hostkeyalias: localhost-with-alias
debug3: hostkeys_foreach: reading file "/root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts"
debug3: record_hostkey: found key type ED25519 in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:1
debug3: record_hostkey: found key type ED25519-SK in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:2
debug3: record_hostkey: found key type RSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:3
debug3: record_hostkey: found key type DSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:4
debug3: record_hostkey: found key type ECDSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:5
debug3: record_hostkey: found key type ECDSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:6
debug3: record_hostkey: found key type ECDSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:7
debug3: record_hostkey: found key type ECDSA-SK in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:8
debug3: record_hostkey: found key type SM2 in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:9
debug3: load_hostkeys: loaded 9 keys from localhost-with-alias
debug3: hostkeys_foreach: reading file "/root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts"
debug3: record_hostkey: found key type ED25519 in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:1
debug3: record_hostkey: found key type ED25519-SK in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:2
debug3: record_hostkey: found key type RSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:3
debug3: record_hostkey: found key type DSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:4
debug3: record_hostkey: found key type ECDSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:5
debug3: record_hostkey: found key type ECDSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:6
debug3: record_hostkey: found key type ECDSA in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:7
debug3: record_hostkey: found key type ECDSA-SK in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:8
debug3: record_hostkey: found key type SM2 in file /root/rpmbuild/BUILD/openssh-8.2p1/regress/known_hosts:9
debug3: load_hostkeys: loaded 9 keys from localhost-with-alias
debug3: order_hostkeyalgs: have matching best-preference key type ecdsa-sha2-nistp256-cert-v01@openssh.com, using HostkeyAlgorithms verbatim
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: sm2-sm3,ext-info-c
debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,sntrup4591761x25519-sha512@tinyssh.org,sm2-sm3
debug2: host key algorithms: ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com
debug2: compression stoc: none,zlib@openssh.com
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug1: kex: algorithm: sm2-sm3
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: sm2-sm3 need=64 dh_need=64
debug1: kex: sm2-sm3 need=64 dh_need=64
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Connection closed by UNKNOWN port 65535
FAIL: ssh kex sm2-sm3

20.03-LTS-SP3源可以使用提供国密算法之后的版本，如：8.2p1-21
可从如下镜像源获取：
https://repo.openeuler.org/openEuler-20.03-LTS-SP3/update/aarch64/Packages/

我重新从https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/x86_64/Packages/
这个地址下载了 8.2p1-21 版本，

可以启动sshd服务了，但是国密算法链接是还是失败了

[root@localhost openeuler-pkg]# systemctl status sshd 
● sshd.service - OpenSSH server daemon
   Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor preset: enabled)
   Active: active (running) since Fri 2023-10-13 15:34:44 CST; 5s ago
     Docs: man:sshd(8)
           man:sshd_config(5)
 Main PID: 354077 (sshd)
    Tasks: 1
   Memory: 984.0K
   CGroup: /system.slice/sshd.service
           └─354077 /usr/sbin/sshd -D -oCiphers=aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes2>

10月 13 15:34:44 localhost.localdomain systemd[1]: Starting OpenSSH server daemon...
10月 13 15:34:44 localhost.localdomain sshd[354077]: /etc/ssh/sshd_config line 143: Deprecated option RSA>
10月 13 15:34:44 localhost.localdomain sshd[354077]: /etc/ssh/sshd_config line 145: Deprecated option Rho>
10月 13 15:34:44 localhost.localdomain sshd[354077]: Server listening on 0.0.0.0 port 22.
10月 13 15:34:44 localhost.localdomain sshd[354077]: Server listening on :: port 22.
10月 13 15:34:44 localhost.localdomain systemd[1]: Started OpenSSH server daemon.
[root@localhost openeuler-pkg]# 
[root@localhost openeuler-pkg]# 
[root@localhost openeuler-pkg]# 
[root@localhost openeuler-pkg]# ssh -o PreferredAuthentications=publickey -o HostKeyAlgorithms=sm2 -o PubkeyAcceptedKeyTypes=sm2 -o Ciphers=sm4-ctr -o MACs=hmac-sm3 -o KexAlgorithms=sm2-sm3 -i ~/.ssh/id_sm2 root@127.0.0.1
Unable to negotiate with 127.0.0.1 port 22: no matching key exchange method found. Their offer: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
[root@localhost openeuler-pkg]# ssh -Q kex
diffie-hellman-group1-sha1
diffie-hellman-group14-sha1
diffie-hellman-group14-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group-exchange-sha1
diffie-hellman-group-exchange-sha256
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
curve25519-sha256
curve25519-sha256@libssh.org
sntrup4591761x25519-sha512@tinyssh.org
sm2-sm3

服务端未配置密钥交换算法：sm2-sm3
输入图片说明
服务端配置文件中（默认配置文件/etc/ssh/sshd_config）在 KexAlgorithms 后增加 sm2-sm3 后执行"systemctl restart sshd"重启sshd，然后再尝试使用国密算法登录。

好的，我今天试一下

(gdb) bt
#0  derive_key (ssh=0x5555557f2030, keyp=0x7fffffffcef8, shared_secret=0x5555557e9240, hashlen=32, 
    hash=0x7fffffffcfc8 "\244K\265\345M6\270\220\344n_\020\026\343\337\305\017\345\254\355\265c\027\301\063\305&#\246m\317\376\060\353}UUU", need=<optimized out>, id=65) at kex.c:1140
#1  kex_derive_keys (ssh=ssh@entry=0x5555557f2030, 
    hash=hash@entry=0x7fffffffcfc8 "\244K\265\345M6\270\220\344n_\020\026\343\337\305\017\345\254\355\265c\027\301\063\305&#\246m\317\376\060\353}UUU", hashlen=32, shared_secret=0x5555557e9240) at kex.c:1274
#2  0x00005555555bbe42 in input_kex_gen_init (type=<optimized out>, seq=<optimized out>, 
    ssh=0x5555557f2030) at kexgen.c:333
#3  0x00005555555ad106 in ssh_dispatch_run (ssh=ssh@entry=0x5555557f2030, mode=0, done=0x5555557f2930)
    at dispatch.c:113
#4  0x00005555555ad169 in ssh_dispatch_run_fatal (ssh=0x5555557f2030, mode=<optimized out>, 
    done=<optimized out>) at dispatch.c:133
#5  0x000055555556614b in do_ssh2_kex (ssh=0x5555557f2030) at sshd.c:2568
#6  main (ac=<optimized out>, av=<optimized out>) at sshd.c:2328

$8 = {
  session_id = 0x5555557dbf50 "\217\t\027\344H\371\017\b\363%\357jY\331\362U\261\332p\366\004g\202R\034\061U\322\f\375\060", session_id_len = 32, newkeys = {0x5555557de6a0, 0x5555557ded50}, we_need = 32, 
  dh_need = 32, server = 1, name = 0x5555557db540 "sm2-sm3", hostkey_alg = 0x5555557de830 "sm2", 
  hostkey_type = 8, hostkey_nid = 1172, kex_type = 10, server_sig_algs = 0x0, ext_info_c = 1, 
  my = 0x5555557dc4c0, peer = 0x5555557deff0, client_version = 0x5555557ec8f0, 
  server_version = 0x5555557ebf50, done = 0, flags = 3, hash_alg = 5, ec_nid = 1172, 
  gss_deleg_creds = 0, gss_trust_dns = 0, gss_host = 0x0, gss_client = 0x0, failed_choice = 0x0, 
  verify_host_key = 0x0, load_host_public_key = 0x555555566d42 <get_hostkey_public_by_type>, 
  load_host_private_key = 0x555555566d49 <get_hostkey_private_by_type>, 
  host_key_index = 0x55555556670c <get_hostkey_index>, sign = 0x555555566b93 <sshd_hostkey_sign>, kex = {
    0x5555555bbf87 <kex_gen_server>, 0x5555555bbf87 <kex_gen_server>, 0x5555555bbf87 <kex_gen_server>, 
    0x5555555bbf87 <kex_gen_server>, 0x5555555bbf87 <kex_gen_server>, 0x5555555bb772 <kexgex_server>, 
    0x5555555bb772 <kexgex_server>, 0x5555555bbf87 <kex_gen_server>, 0x5555555bbf87 <kex_gen_server>, 
    0x5555555bbf87 <kex_gen_server>, 0x5555555bbf87 <kex_gen_server>, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 
    0x0}, dh = 0x0, min = 0, max = 0, nbits = 0, ec_client_key = 0x0, ec_group = 0x0, 
  c25519_client_key = '\000' <repeats 31 times>, c25519_client_pubkey = '\000' <repeats 31 times>, 
  sntrup4591761_client_key = '\000' <repeats 1599 times>, client_pub = 0x0}

出问题的函数在这里，传入国密算法会导致失败
```
+       r = EVP_KDF_ctrl(ctx, EVP_KDF_CTRL_SET_MD, digest_to_md(kex->hash_alg));
+       if (r != 1) {
+               r = SSH_ERR_LIBCRYPTO_ERROR;
+               goto out;
+       }
```

我这边屏蔽了的补丁openssh-8.0p1-openssl-kdf.patch 后能正常工作

请问kdf接口支持国密的部分有相关补丁吗，这样openssh就不需要额外改动了