[Workaround.org] Update your keys (OpenSSL security problem)

Christoph Haas email at christoph-haas.de
Thu May 15 13:15:30 CEST 2008


Dear fans of the ispmail tutorial... :)

I'm sure you all have noticed the recent security problem in the Debian 
package of the OpenSSL library that leads to insecure keys. I'm no 
cryptography expert but reading a few analysises it looks like the number 
of possible SSL keys is as low as 32768 which is essentially no security 
at all. You are advised to update your keys as the "dist-upgrade" can't 
know about your self-made certificates.

This refers to:
/etc/ssl/private/dovecot.pem
/etc/ssl/private/postfix.pem

The security announcement:
http://www.debian.org/security/2008/dsa-1571

Kindly
 Christoph
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://workaround.org/pipermail/workaround-chitchat/attachments/20080515/d10cc4bd/attachment.pgp 


More information about the Workaround-chitchat mailing list