newsNews: SSH keys weakness

 
 
Latest News
Mercurial hg moved to new server posted by agn, Thu 12 Jan 2017 03:07:50 PM UTC - 0 replies
Bazaar bzr moved to new server posted by agn, Tue 10 Jan 2017 03:33:35 AM UTC - 0 replies
Subversion svn service moved to the new server. posted by rwp, Fri 06 Jan 2017 07:02:03 PM UTC - 0 replies
The cvs service has moved to the new server posted by agn, Fri 16 Dec 2016 03:14:26 AM UTC - 0 replies
The git service has moved to the new server posted by rwp, Sun 04 Dec 2016 12:38:44 AM UTC - 0 replies
[184 news in archive]

SSH keys weakness

Item posted by Sylvain Beucler <Beuc> on Tue 13 May 2008 11:00:43 PM UTC.

A vulnerability was discovered in Debian Etch's OpenSSL package:
http://lists.debian.org/debian-security-announce/2008/msg00152.html

This means that keys generated under this platform version are weak, and easily crackable.

Consequently we've run the dowkd.pl tool and disabled keys considered weak. They are marked as '# WEAK KEY' in the Savannah interface. Please remove or regenerate these keys (after upgrading your openssl package); we also suggest you look for other places where these keys were used, and replace them there too.

The Savannah SSH host keys (cvs/git/arch/download.savannah.gnu.org) predate Etch and are not impacted.

The savannah.gnu.org and savannah.nongnu.org https keys were generated through GnuTLS and are not impacted.

No messages in SSH keys weakness

 

Back to the top


Powered by Savane 3.1-cleanup1