From 7c0a8fc2106ed4ce0570aa245bfdcaf5ff67cf37 Mon Sep 17 00:00:00 2001 From: Viktor Szakats Date: Fri, 24 Apr 2026 14:38:50 +0200 Subject: [PATCH] GHA/windows: disable ssh-ed25519 hostkey in libssh2-wincng jobs libssh2 built with the WinCNG crypto backend does not support ed25519 hostkeys. Ref: #21438 Follow-up to acda4eae5eeb24a7b0ab9ec7b1783d74eb43687c #21223 Closes #21439 --- .github/workflows/windows.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index 7d23b11b05..e9a64b436c 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -509,6 +509,7 @@ jobs: TFLAGS+=' ~3000 ~3001 ~3023 ~3024' # 'HTTPS localhost, first/last subject alt name matches, CN does not match' HTTPS, HTTP GET, PEM certificate (returning 56) if [[ "${MATRIX_INSTALL}" = *'libssh2-wincng'* ]]; then TFLAGS+=' ~SCP ~SFTP' # Flaky: `-8, Unable to exchange encryption keys`. https://github.com/libssh2/libssh2/issues/804 + unset CURL_TEST_SSH_KEYALGO # libssh2 built with WinCNG does not support ssh-ed25519 hostkeys fi if [[ "${TFLAGS}" = *'-t'* ]]; then TFLAGS+=' !2300' # Leaks memory and file handle via tool_doswin.c / win32_stdin_read_thread() @@ -1162,6 +1163,7 @@ jobs: if [[ "${MATRIX_INSTALL_MSYS2}" = *'libssh2-wincng'* || \ "${MATRIX_INSTALL_VCPKG}" = *'libssh2[core,zlib]'* ]]; then TFLAGS+=' ~SCP ~SFTP' # Flaky: `-8, Unable to exchange encryption keys`. https://github.com/libssh2/libssh2/issues/804 + unset CURL_TEST_SSH_KEYALGO # libssh2 built with WinCNG does not support ssh-ed25519 hostkeys fi if [ -n "${MATRIX_OPENSSH}" ]; then # OpenSSH-Windows TFLAGS+=' ~601 ~603 ~617 ~619 ~621 ~641 ~665 ~2004' # SCP