sshupdate is an independent maintenance tool by teuk.

OpenSSH, OpenSSL and Debian remain projects of their respective authors.
Their source code and binaries are downloaded/built separately, under their
own licenses; they are not included in this source distribution.

engine/openssl-release.gpg is the public OpenSSL release certificate from
https://openssl-library.org/source/pubkeys.asc. Primary fingerprint:
B146647E45A7B33947AB226B2A2C87D161692D40.

No private signing key or production host key is included.
