anchor.diff:      else
         fetchurl {
           url = "mirror://openbsd/OpenSSH/portable/${pname}-${version}.tar.gz";
  -        sha256 = "1b8sy6v0b8v4ggmknwcqx3y1rjcpsll0f1f8f4vyv11x4ni3njvb";
  +        sha256 = "1zwk3g57gb13br206k6jdhgnp6y1nibwswzraqspbl1m73pxpx82";
         };
   
     patches =
  
positive.code:         url = https://github.com/openssh/openssh-portable/commit/6010c0303a422a9c5fa8860c061bf7105eb7f8b2.patch;
          sha256 = "0q27i9ymr97yb628y44qi4m11hk5qikb1ji1vhvax8hp18lwskds";
        })
  
        ./ssh-keysign.patch
      ]
      ++ optional withGssapiPatches (assert withKerberos; gssapiPatch);
  
    postPatch =
  
negative.code:   gssapiPatch = fetchpatch {
      name = "openssh-gssapi.patch";
      url = "https://salsa.debian.org/ssh-team/openssh/raw/"
        + "e50a98bda787a3b9f53ed67bdccbbac0bde1f9ae"
        + "/debian/patches/gssapi.patch";
      sha256 = "14j9cabb3gkhkjc641zbiv29mbvsmgsvis3fbj8ywsd21zc7m2hv";
    };
  
  in
  with stdenv.lib;
  stdenv.mkDerivation rec {
    pname = "openssh";
    version = if hpnSupport then "7.8p1" else "8.1p1";
  
    src = if hpnSupport then
        fetchurl {
  