Please bear in mind that I have no cyber-security background at all, but have been tasked by my company with making certain applications on our platform FIPS-compliant.
From what I've discussed with my co-workers, our platform requires a FIPS-compliant SSH.
We have a FIPS-compliant OpenSSL (well, a version of OpenSSL configured and compiled against the fipscanister object at least). From here, how can I create a FIPS-compliant OpenSSH?
Our target OS is a derivative of Linux.
I've found some patches that looked promising, like this one, but they either lack documentation, or (in the above case) flat out say this is for the author's use only and everyone else should steer clear.
I think a good answer would be something like:
"When you configure OpenSSH, enable/disable these algorithms" or...
"Download source for OpenSSH version X and patch it with this patch"