-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/13/08 19:36, Nelson Castillo wrote:
> On Tue, May 13, 2008 at 7:05 PM, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>> On May 13, 2:20 pm, Ross Boylan <[EMAIL PROTECTED]> wrote:
>>  > Does this mean that RSA keys for openssh should not be considered
>>  > compromised?  If so, why the need to regenerate them?
>>
>>  On our systems the dowkd.pl script found weak DSA and RSA keys, both
>>  as host keys, and as user-generated keypairs.  We've regenerated the
>>  RSA keys as well.
> 
> ~$ ./dowkd.pl  user nelson
> /home/nelson/.ssh/authorized_keys:1: weak key
> /home/nelson/.ssh/id_rsa.pub:1: warning: no suitable blacklist

$ ./dowkd.pl  user me
$

I think I generated my keys long-enough ago that they aren't broken.

- --
Ron Johnson, Jr.
Jefferson LA  USA

We want... a Shrubbery!!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIKkYnS9HxQb37XmcRAtUEAKDHhx1sS9M3a6Eyu1GtXX+YYtv3NwCfXgxU
fTInSLMWPd+8amsUCHSBpxs=
=y5oG
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to