diff --git a/libssh-0.9.6.tar.xz b/libssh-0.9.6.tar.xz
new file mode 100644
index 0000000000000000000000000000000000000000..96366fb536115a9d5d06edd1a40520d55ef4ed14
Binary files /dev/null and b/libssh-0.9.6.tar.xz differ
diff --git a/libssh-0.9.6.tar.xz.asc b/libssh-0.9.6.tar.xz.asc
new file mode 100644
index 0000000000000000000000000000000000000000..cbed27f48c40a1a4a3bd68021f3dac83e4d237a4
--- /dev/null
+++ b/libssh-0.9.6.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEEjf9T4Y8qvI2PPJIjfuD8TcwBTj0FAmEniOkACgkQfuD8TcwB
+Tj0TKQ/9HiMAGSMHoQ+iPVLP06iTc6Cy7rNyON2nPDQwAz0V/dfvkrKAAEflfgYd
+3pt3dbE/qgh2kgQLb9kpbCUmFoGuLgKz36RPOsggwuOsN+eD1n65q8W39sMOQid3
+bjUIOKRdYWC1suZ9fMAO1Ignl69Opd8dAq1Has9YzglaeQaV/lnYQOW4UG0xKHck
+ZOp2qLfjmaQiBAI61eRyxqIYC0F67WKd0bo9D2csoocDVvHLq4syPdbMOfDTB+LL
+KZSAZVW1R1JUVZMkp/P/HU11jNNy3wKoLafocnq8bXkPVrqhyuo+hDJV/OPUvFLa
+VE/BzIRoMNG+1R+GJpwE7ut2DIHPxnZTThRkeVN5qP1+hbhgLJhW62I+HeAnD4s+
++W7fwJovN28I+wqSjVEP8JguprVuoDAX5jVHbeZoMT7p8ATA4Nh3KCbYELEwTtFG
+zsEIlBvoNXD3ce7xGXL3MPqfgKqrZQjRG/iOWvKwDV7WrqK1cFFyL7aeBfK2+dQq
+1Ew7aYlTsH6Hap7XByeSsy4Z5ts3VXIoFix/h+Br5OTYKYgITM7bijNAQ6A2ZWQN
+TxCv8X0sVyaGyXhxG6QhrEWZjFe496MneZkq9e6HKZyaSbzwFwMgOvrUUC7fa8e5
+o1Rvozah81U0nsikwTmDrm15RSK3mr2X34zPW2Ahzr1I5tGZzOk=
+=cO0k
+-----END PGP SIGNATURE-----
diff --git a/libssh.keyring b/libssh.keyring
new file mode 100644
index 0000000000000000000000000000000000000000..411bf36750f0fc4a8856034415e39c7116559ee4
Binary files /dev/null and b/libssh.keyring differ
diff --git a/libssh.spec b/libssh.spec
new file mode 100644
index 0000000000000000000000000000000000000000..0fefc2834bb5a87241aeaf6f04d61102d25844d0
--- /dev/null
+++ b/libssh.spec
@@ -0,0 +1,132 @@
+%define anolis_release 1
+Name:           libssh
+Version:        0.9.6
+Release:        2.%{anolis_release}%{?dist}
+Summary:        A library implementing the SSH protocol
+License:        LGPLv2+
+URL:            http://www.libssh.org
+
+Source0:        https://www.libssh.org/files/0.9/%{name}-%{version}.tar.xz
+Source1:        https://www.libssh.org/files/0.9/%{name}-%{version}.tar.xz.asc
+Source2:        https://cryptomilk.org/gpgkey-8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D.gpg#/%{name}.keyring
+Source3:        libssh_client.config
+Source4:        libssh_server.config
+
+BuildRequires:  cmake
+BuildRequires:  gcc-c++
+BuildRequires:  gnupg2
+BuildRequires:  openssl-devel
+BuildRequires:  pkgconfig
+BuildRequires:  zlib-devel
+BuildRequires:  krb5-devel
+BuildRequires:  libcmocka-devel
+BuildRequires:  pam_wrapper
+BuildRequires:  socket_wrapper
+BuildRequires:  nss_wrapper
+BuildRequires:  uid_wrapper
+BuildRequires:  openssh-clients
+BuildRequires:  openssh-server
+BuildRequires:  nmap-ncat
+
+Requires:       %{name}-config = %{version}-%{release}
+
+Recommends:     crypto-policies
+
+Provides: libssh_threads.so.4()(64bit)
+
+%description
+The ssh library was designed to be used by programmers needing a working SSH
+implementation by the mean of a library. The complete control of the client is
+made by the programmer. With libssh, you can remotely execute programs, transfer
+files, use a secure and transparent tunnel for your remote programs. With its
+Secure FTP implementation, you can play with remote files easily, without
+third-party programs others than libcrypto (from openssl).
+
+%package devel
+Summary:        Development files for %{name}
+Requires:       %{name}%{?_isa} = %{version}-%{release}
+
+%description devel
+The %{name}-devel package contains libraries and header files for developing
+applications that use %{name}.
+
+%package config
+Summary:        Configuration files for %{name}
+BuildArch:      noarch
+Obsoletes:      %{name} < 0.9.0-3
+
+%description config
+The %{name}-config package provides the default configuration files for %{name}.
+
+%prep
+gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0}
+%autosetup -p1
+
+%build
+%cmake \
+    -DUNIT_TESTING=ON \
+    -DCLIENT_TESTING=ON \
+    -DSERVER_TESTING=ON \
+    -DGLOBAL_CLIENT_CONFIG="%{_sysconfdir}/libssh/libssh_client.config" \
+    -DGLOBAL_BIND_CONFIG="%{_sysconfdir}/libssh/libssh_server.config"
+
+%cmake_build
+
+%install
+%cmake_install
+install -d -m755 %{buildroot}%{_sysconfdir}/libssh
+install -m644 %{SOURCE3} %{buildroot}%{_sysconfdir}/libssh/libssh_client.config
+install -m644 %{SOURCE4} %{buildroot}%{_sysconfdir}/libssh/libssh_server.config
+
+#
+# Workaround for the removal of libssh_threads.so
+#
+# This will allow libraries which link against libssh_threads.so or packages
+# requiring it to continue working.
+#
+pushd %{buildroot}%{_libdir}
+for i in libssh.so*;
+do
+    _target="${i}"
+    _link_name="${i%libssh*}libssh_threads${i##*libssh}"
+    if [ -L "${i}" ]; then
+        _target="$(readlink ${i})"
+    fi
+    ln -s "${_target}" "${_link_name}"
+done;
+popd
+
+%ldconfig_scriptlets
+
+%check
+# Tests are randomly failing when run in parallel
+%global _smp_build_ncpus 1
+
+# https://gitlab.com/libssh/libssh-mirror/-/issues/107
+# The torture_auth tests currently fail when run against OpenSSH 8.8
+%ctest -- -E torture_auth
+
+%files
+%doc AUTHORS BSD ChangeLog README
+%license COPYING
+%{_libdir}/libssh.so.4*
+%{_libdir}/libssh_threads.so.4*
+
+%files devel
+%{_includedir}/libssh/
+# own this to avoid dep on cmake -- rex
+%dir  %{_libdir}/cmake/
+%{_libdir}/cmake/libssh/
+%{_libdir}/pkgconfig/libssh.pc
+%{_libdir}/libssh.so
+%{_libdir}/libssh_threads.so
+
+%files config
+%attr(0755,root,root) %dir %{_sysconfdir}/libssh
+%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/libssh/libssh_client.config
+%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/libssh/libssh_server.config
+
+%changelog
+* Fri Mar 04 2022 mgb01105731 <mgb01105731@alibaba-inc.com> - 0.9.6-2.1
+- Init from upstream verison 0.9.6-2
+
diff --git a/libssh_client.config b/libssh_client.config
new file mode 100644
index 0000000000000000000000000000000000000000..1d293bdfd8aa688459b6a9f560b0a54d666b18ba
--- /dev/null
+++ b/libssh_client.config
@@ -0,0 +1,4 @@
+# Parse system-wide crypto configuration file
+Include /etc/crypto-policies/back-ends/libssh.config
+# Parse OpenSSH configuration file for consistency
+Include /etc/ssh/ssh_config
diff --git a/libssh_server.config b/libssh_server.config
new file mode 100644
index 0000000000000000000000000000000000000000..d3ef5c2dec6ebc6ddda29f6dc30034ebedba0f42
--- /dev/null
+++ b/libssh_server.config
@@ -0,0 +1,2 @@
+# Parse system-wide crypto configuration file
+Include /etc/crypto-policies/back-ends/libssh.config