For FOcal, the patch which changed the OpenSSL lib, adding the behavior to check big numbers in dh_cache_need is openssl-1.1.1-fips-dh.patch.
One proposal is to change the openssh code to select the parameters for DH from the dh modules of OpenSSL.
For FOcal, the patch which changed the OpenSSL lib, adding the behavior to check big numbers in dh_cache_need is openssl- 1.1.1-fips- dh.patch.
One proposal is to change the openssh code to select the parameters for DH from the dh modules of OpenSSL.