diff -up openssh-9.9p1/log.c.xxx openssh-9.9p1/log.c --- openssh-9.9p1/log.c.xxx 2024-10-22 11:55:44.281939275 +0200 +++ openssh-9.9p1/log.c 2024-10-22 11:56:16.709676267 +0200 @@ -52,6 +52,9 @@ #include "log.h" #include "match.h" +#ifdef WITH_OPENSSL +#include +#endif static LogLevel log_level = SYSLOG_LEVEL_INFO; static int log_on_stderr = 1; @@ -438,6 +438,26 @@ sshlog(const char *file, const char *fun va_end(args); } +#ifdef WITH_OPENSSL +static int +openssl_error_print_cb(const char *str, size_t len, void *u) +{ + sshlogdirect(SYSLOG_LEVEL_DEBUG1, 0, "openssl error %s", str); + return 0; +} +#endif + +void +sshlog_openssl(int r) +{ +#ifdef WITH_OPENSSL + if (r != SSH_ERR_LIBCRYPTO_ERROR) return; + + ERR_print_errors_cb(openssl_error_print_cb, NULL); +#endif + return; +} + void sshlogdie(const char *file, const char *func, int line, int showfunc, LogLevel level, const char *suffix, const char *fmt, ...) diff -up openssh-8.7p1/log.h.xxx openssh-8.7p1/log.h --- openssh-8.7p1/log.h.xxx 2024-10-18 12:56:18.944971946 +0200 +++ openssh-8.7p1/log.h 2024-10-18 13:03:38.324351416 +0200 @@ -71,6 +71,7 @@ void cleanup_exit(int) __attribute__((n void sshlog(const char *, const char *, int, int, LogLevel, const char *, const char *, ...) __attribute__((format(printf, 7, 8))); +void sshlog_openssl(int); void sshlogv(const char *, const char *, int, int, LogLevel, const char *, const char *, va_list); void sshlogdie(const char *, const char *, int, int, diff -up openssh-8.7p1/auth2-pubkey.c.yyy openssh-8.7p1/auth2-pubkey.c --- openssh-8.7p1/auth2-pubkey.c.yyy 2024-10-18 13:27:00.709055845 +0200 +++ openssh-8.7p1/auth2-pubkey.c 2024-10-18 13:27:31.638784460 +0200 @@ -131,6 +131,7 @@ userauth_pubkey(struct ssh *ssh) goto done; } if ((r = sshkey_from_blob(pkblob, blen, &key)) != 0) { + sshlog_openssl(r); error_fr(r, "parse key"); goto done; } diff -up openssh-8.7p1/dispatch.c.yyy openssh-8.7p1/dispatch.c --- openssh-8.7p1/dispatch.c.yyy 2024-10-18 13:27:56.349366570 +0200 +++ openssh-8.7p1/dispatch.c 2024-10-18 13:28:17.921874757 +0200 @@ -130,6 +130,8 @@ ssh_dispatch_run_fatal(struct ssh *ssh, { int r; - if ((r = ssh_dispatch_run(ssh, mode, done)) != 0) + if ((r = ssh_dispatch_run(ssh, mode, done)) != 0) { + sshlog_openssl(r); sshpkt_fatal(ssh, r, "%s", __func__); + } }