[Workaround.org] Update your keys (OpenSSL security problem)
Christoph Haas
email at christoph-haas.de
Thu May 15 13:15:30 CEST 2008
Dear fans of the ispmail tutorial... :)
I'm sure you all have noticed the recent security problem in the Debian
package of the OpenSSL library that leads to insecure keys. I'm no
cryptography expert but reading a few analysises it looks like the number
of possible SSL keys is as low as 32768 which is essentially no security
at all. You are advised to update your keys as the "dist-upgrade" can't
know about your self-made certificates.
This refers to:
/etc/ssl/private/dovecot.pem
/etc/ssl/private/postfix.pem
The security announcement:
http://www.debian.org/security/2008/dsa-1571
Kindly
Christoph
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://workaround.org/pipermail/workaround-chitchat/attachments/20080515/d10cc4bd/attachment.pgp
More information about the Workaround-chitchat
mailing list