From e5e434cc2977687f620daba2d4481be46b1e10f8 Mon Sep 17 00:00:00 2001
From: EnumDev <enumdev@enumerated.dev>
Date: Fri, 19 Sep 2025 13:57:15 +0300
Subject: [PATCH] Update package version to 10.0p2

---
 check-version.sh | 18 ++++++++++++++++++
 pkg.info         |  7 ++++---
 source.sh        | 22 +++++++++++++++-------
 3 files changed, 37 insertions(+), 10 deletions(-)
 create mode 100644 check-version.sh

diff --git a/check-version.sh b/check-version.sh
new file mode 100644
index 0000000..4fc9f43
--- /dev/null
+++ b/check-version.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Github repository
+REPO="openssh/openssh-portable"
+
+# Get tag name using Github Rest API
+TAG_NAME=$(curl -s -L -H "X-GitHub-Api-Version: 2022-11-28" -H "Authorization: token ${GITHUB_API_TOKEN}" https://api.github.com/repos/"$REPO"/tags | jq -r '.[0].name')
+
+# Trim prefix
+VERSION=${TAG_NAME//V_/}
+
+# Replace '_P' with 'p'
+VERSION=${VERSION//_P/p}
+
+# Replace '_' with '.'
+VERSION=${VERSION//_/.}
+
+echo "$VERSION"
diff --git a/pkg.info b/pkg.info
index 9b351ac..896c29e 100644
--- a/pkg.info
+++ b/pkg.info
@@ -1,10 +1,11 @@
 name: openssh
 description: The premier connectivity tool for remote login with the SSH protocol
-version: 9.9p2
+version: 10.0p2
 url: https://www.openssh.com/
 license: BSD-2-Clause,BSD-3-Clause,ISC,LicenseRef-Public-Domain,MIT
 architecture: any
 type: source
-depends: ["glibc","krb5","libmd","libxcrypt","openssl","pam","zlib","shadow"]
-optional_depends: ["sh","xorg-xauth"]
+depends: ["glibc","krb5","libedit","libmd","libxcrypt","openssl","pam","zlib","shadow"]
+optional_depends: ["libfido2"]
+make_depends: ["sh","libfido2","xorg-xauth"]
 keep: ["etc/ssh/"]
diff --git a/source.sh b/source.sh
index 3f85e57..ed2195f 100644
--- a/source.sh
+++ b/source.sh
@@ -18,11 +18,15 @@ build() {
   ./configure --prefix=/usr                                                         \
               --sysconfdir=/etc/ssh                                                 \
               --with-privsep-user=nobody                                            \
+              --with-privsep-path=/usr/share/empty.sshd                             \
               --with-default-path=/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin \
-              --with-superuser-path=/usr/sbin:/usr/bin                              \
               --with-pid-dir=/run                                                   \
+              --with-security-key-builtin                                           \
               --with-kerberos5=/usr                                                 \
-              --with-pam
+              --with-xauth=/usr/bin/xauth                                           \
+              --with-pam                                                            \
+              --with-ssl-engine                                                     \
+              --with-libedit
   make
 }
 
@@ -36,16 +40,20 @@ check() {
 # This function is used to move the compiled files into the output directory
 package() {
   make DESTDIR="$BPM_OUTPUT" install
-  
+
   install -m755 contrib/ssh-copy-id "$BPM_OUTPUT"/usr/bin
   install -m644 contrib/ssh-copy-id.1 "$BPM_OUTPUT"/usr/share/man/man1
-  
+
+  # Install pam module
   install -Dm644 "$BPM_WORKDIR"/sshd-pam "$BPM_OUTPUT"/etc/pam.d/sshd
-  
+
+  # Install default sshd config
   install -Dm644 "$BPM_WORKDIR"/sshd_config "$BPM_OUTPUT"/etc/ssh/sshd_config
-  
+
+  # Install esvm services
   install -Dm644 "$BPM_WORKDIR"/sshd.esv "$BPM_OUTPUT"/etc/esvm/services/sshd.esv
   install -Dm644 "$BPM_WORKDIR"/ssh-keygen.esv "$BPM_OUTPUT"/etc/esvm/services/ssh-keygen.esv
-  
+
+  # Install package license  
   install -Dm644 LICENCE "$BPM_OUTPUT"/usr/share/licenses/openssh/LICENSE
 }