lp:ubuntu/gutsy-security/openssl-blacklist

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

5. By Jamie Strandboge on 2008-06-16

* add RSA-4096 blacklist for le64
* install RSA-4096 blacklist
* don't send STDERR to STDOUT as this may interfere with obtaining the
  modulus with long bits

4. By Jamie Strandboge on 2008-06-11

* allow checking of certificate requests
* only check moduli with an exponent of 65537 (the default on Debian/Ubuntu)
* update gen_certs.sh for when ~/.rnd does not exist when openssl is run
  which can happen with openssl 0.9.8g and higher
* update gen_certs.sh to use '0' (in case of PID randomization)
* added more examples
* only prompt once for password (Closes: #483500)
* properly cache database reads when bits are same
* added '-m' and '-b' arguments. This is helpful for applications calling
  openssl-vulnkey when the modulus and bits are known, such as openvpn.
* man page updates
* added test.sh
* added blacklists for when ~/.rnd does not exist when openssl is run
  (LP: #232104)
* added 512 bit and partial 4096 blacklists (need le64) (LP: #231014)
* reorganized source databases, and ship the new gen_certs.sh format
* debian/rules: updated to use new blacklist format and organization
* create openssl-blacklist-extra package (but don't ship 4096 yet)
* Modify Maintainer value to match the DebianMaintainerField
  specification.

3. By Jamie Strandboge on 2008-05-21

added gen_certs.sh and getpid.c

2. By Mathias Gug on 2008-05-14

* openssl-vulnkey:
  - Don't exit if the key cannot be parsed.
  - Don't fail if stderr is not available. (LP: #230193)

1. By Jamie Strandboge on 2008-05-13

no change rebuild for -security