[SAC] Find and fix weak OpenSSL/OpenSSH keys

Markus Neteler neteler at osgeo.org
Tue Jun 3 05:47:09 EDT 2008


Hi SAC,

you will now about the OpenSSL/OpenSSH keys weakness under certain
circumstances.
There is a test script available, which should be executed on the
osgeo machines.

See for example
http://blogs.techrepublic.com.com/opensource/?p=210
or
http://wiki.debian.org/SSLkeys#head-45e521140d6b8f2a0f96a115a5fc616c4f1baf0b

I have run it already on one some of my machines (several weak keys found and
eliminated) and grass.osgeo.org (one user key identified, user is
notified that his machine
is at risk).

Best,
Markus


More information about the Sac mailing list