newsNews: SSH keys weakness

 
 
Latest News
Mercurial hg moved to new server posted by agn, Thu 12 Jan 2017 03:07:50 PM UTC - 0 replies
Bazaar bzr moved to new server posted by agn, Tue 10 Jan 2017 03:33:35 AM UTC - 0 replies
Subversion svn service moved to the new server. posted by rwp, Fri 06 Jan 2017 07:02:03 PM UTC - 0 replies
The cvs service has moved to the new server posted by agn, Fri 16 Dec 2016 03:14:26 AM UTC - 0 replies
The git service has moved to the new server posted by rwp, Sun 04 Dec 2016 12:38:44 AM UTC - 0 replies
[184 news in archive]

SSH keys weakness

Item posted by Sylvain Beucler <Beuc> on Tue 13 May 2008 11:00:43 PM UTC.

A vulnerability was discovered in Debian Etch's OpenSSL package:
http://lists.debian.org/debian-security-announce/2008/msg00152.html

This means that keys generated under this platform version are weak, and easily crackable.

Consequently we've run the dowkd.pl tool and disabled keys considered weak. They are marked as '# WEAK KEY' in the Savannah interface. Please remove or regenerate these keys (after upgrading your openssl package); we also suggest you look for other places where these keys were used, and replace them there too.

The Savannah SSH host keys (cvs/git/arch/download.savannah.gnu.org) predate Etch and are not impacted.

The savannah.gnu.org and savannah.nongnu.org https keys were generated through GnuTLS and are not impacted.

Comments:

No messages in SSH keys weakness

 

Back to the top


Powered by Savane 3.1-cleanup1