···

       
316
       
316
       
 
       


     

       
317
       
317
       
 
       
        UsePAM yes

     

       
318
       
318
       
 
       


     

       
319
       
319
       
-
       
        UsePrivilegeSeparation sandbox

     

       
320
       
320
       
-
       


     

       
321
       
319
       
 
       
        AddressFamily ${if config.networking.enableIPv6 then "any" else "inet"}

     

       
322
       
320
       
 
       
        ${concatMapStrings (port: ''

     

       
323
       
321
       
 
       
          Port ${toString port}

     

···

       
21
       
21
       
 
       
  gssapiSrc = fetchpatch {

     

       
22
       
22
       
 
       
    name = "openssh-gssapi.patch";

     

       
23
       
23
       
 
       
    url = "https://anonscm.debian.org/cgit/pkg-ssh/openssh.git/plain/debian"

     

       
24
       
24
       
-
       
        + "/patches/gssapi.patch?id=255b8554a50b5c75fca63f76b1ac837c0d4fb7aa";

     

       
25
       
25
       
-
       
    sha256 = "0yg9iq7vb2fkvy36ar0jxk29pkw0h3dhv5vn8qncc3pgwx3617n2";

     

       
24
       
24
       
+
       
        + "/patches/gssapi.patch?id=a18d56bd84f04292ec9178b4b17ef6d56a0c7aef";

     

       
25
       
25
       
+
       
    sha256 = "1sb929lfc3s45km2vpylmlbb6mpqcbr74xl6gx2s4cgnsrfd9kp3";

     

       
26
       
26
       
 
       
  };

     

       
27
       
27
       
 
       


     

       
28
       
28
       
 
       
in

     
···

       
31
       
31
       
 
       
  # Please ensure that openssh_with_kerberos still builds when

     

       
32
       
32
       
 
       
  # bumping the version here!

     

       
33
       
33
       
 
       
  name = "openssh-${version}";

     

       
34
       
34
       
-
       
  version = "7.4p1";

     

       
34
       
34
       
+
       
  version = "7.5p1";

     

       
35
       
35
       
 
       


     

       
36
       
36
       
 
       
  src = fetchurl {

     

       
37
       
37
       
 
       
    url = "mirror://openbsd/OpenSSH/portable/${name}.tar.gz";

     

       
38
       
38
       
-
       
    sha256 = "1l8r3x4fr2kb6xm95s7kjdif1wp6f94d4kljh4qjj9109shw87qv";

     

       
38
       
38
       
+
       
    sha256 = "1w7rb5gbrikxdkp8w7zxnci4549gk4bw1lml01s59w5rzb2y6ilq";

     

       
39
       
39
       
 
       
  };

     

       
40
       
40
       
 
       


     

       
41
       
41
       
 
       
  prePatch = optionalString hpnSupport