Created attachment 812415 [details]
Patch to sshd-keygen to generate ECDSA keys

Description of problem:
The current version of the openssh package does not support elliptic curve cryptography algorithms. Support is available upstream.

Version-Release number of selected component (if applicable):
openssh-6.2p2-5.fc19.x86_64

How reproducible:
100%

Steps to Reproduce:
1. ssh-keygen -t ecdsa

Actual results:
ECC key generation works

Expected results:
ECC key generation does not work

Additional info:
openssl has now been allowed to re-enable ECC: Bug 319901

For the most part, openssh simply needs to be rebuilt against a version of openssl with ECC enabled, but there are currently a few other issues:
* Host key generation doesn't include generation of ecdsa keys
* openssh doesn't build with openssh-6.2p1-fips.patch and openssh-6.2p1-ctr-cavstest.patch

I don't mean to exclude other versions of Fedora, but F19 is what I use, and I'm not sure of the nss version in F18, etc.