From 645106a1cabde92108b77552e33d92f82cf64cfe Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Mon, 4 May 2020 13:02:26 +0200
Subject: [PATCH] tests: Enable all CASignatureAlgorithms as SHA1 certificates
 are now disabled in OpenSSH 8.2p1

This option is unknown to older OpenSSH versions (for example CentOS 7
with OpenSSH 7.4) so we can not add it everywhere.

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
(cherry picked from commit 44de453b227115c0d60926302901ae0869ef5d1e)
---
 tests/torture.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tests/torture.c b/tests/torture.c
index 188e1427..a501f838 100644
--- a/tests/torture.c
+++ b/tests/torture.c
@@ -632,6 +632,9 @@ static void torture_setup_create_sshd_config(void **state, bool pam)
              "\n"
              /* add all supported algorithms */
              "HostKeyAlgorithms " OPENSSH_KEYS "\n"
+#if OPENSSH_VERSION_MAJOR == 8 && OPENSSH_VERSION_MINOR >= 2
+             "CASignatureAlgorithms " OPENSSH_KEYS "\n"
+#endif
              "Ciphers " OPENSSH_CIPHERS "\n"
              "KexAlgorithms " OPENSSH_KEX "\n"
              "MACs " OPENSSH_MACS "\n"