anchor.diff:        ./dont_create_privsep_path.patch
   
         ./ssh-keysign.patch
  -    ] ++ optional hpnSupport
  -      # CVE-2018-20685, can probably be dropped with next version bump
  -      # See https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
  -      # for details
  -      (fetchpatch {
  -        name = "CVE-2018-20685.patch";
  -        url = https://github.com/openssh/openssh-portable/commit/6010c0303a422a9c5fa8860c061bf7105eb7f8b2.patch;
  -        sha256 = "0q27i9ymr97yb628y44qi4m11hk5qikb1ji1vhvax8hp18lwskds";
  -      })
  +    ]
       ++ optional withGssapiPatches (assert withKerberos; gssapiPatch);
   
     postPatch =
  
positive.code:     license = stdenv.lib.licenses.bsd2;
      platforms = platforms.unix ++ platforms.windows;
      maintainers = with maintainers; [ eelco aneeshusa ];
      broken = hpnSupport;
    };
  }
  
negative.code: with stdenv.lib;
  stdenv.mkDerivation rec {
    pname = "openssh";
    version = if hpnSupport then "8.1p1" else "8.2p1";
  
    src = if hpnSupport then
        fetchurl {
          url = "https://github.com/rapier1/openssh-portable/archive/hpn-KitchenSink-8_1_P1.tar.gz";
          sha256 = "1xiv28df9c15h44fv1i93fq8rvkyapjj9vj985ndnw3xk1nvqjyd";
        }
      else
        fetchurl {
  