Bug#471958: openssl: Generated private keys world-readable by default

On Sat, May 28, 2016 at 09:52:30PM +0200, Sebastian Andrzej Siewior wrote: > On 2008-04-06 15:04:58 [+0200], Lionel Elie Mamane wrote: >> OK, fair enough. If only Debian patches it, people using Debian >> will write scripts using genrsa that are dangerous on other >> OSes. I've emailed upstream wi

Bug#471958: openssl: Generated private keys world-readable by default

On 2008-04-06 15:04:58 [+0200], Lionel Elie Mamane wrote: > OK, fair enough. If only Debian patches it, people using Debian will > write scripts using genrsa that are dangerous on other OSes. I've > emailed upstream with the suggestion, we'll see what they think of > it. Upstream suggested to use

Bug#471958: [Pkg-openssl-devel] Bug#471958: openssl: Generated private keys world-readable by default

forwarded 471958 http://rt.openssl.org/index.html?q=1662 thanks On Sun, Apr 06, 2008 at 03:04:58PM +0200, Lionel Elie Mamane wrote: > OK, fair enough. If only Debian patches it, people using Debian will > write scripts using genrsa that are dangerous on other OSes. I've > emailed upstream with the

Bug#471958: openssl: Generated private keys world-readable by default

On Fri, Mar 21, 2008 at 02:23:38PM +0100, Florian Weimer wrote: > * Lionel Elie Mamane: >> On Fri, Mar 21, 2008 at 01:20:01PM +0100, Florian Weimer wrote: [EMAIL PROTECTED]:~ 148 $ openssl genrsa -out foo 512 -rw-r--r-- 1 master master 493 mar 21 11:51 foo The generated key should

Bug#471958: openssl: Generated private keys world-readable by default

* Lionel Elie Mamane: > On Fri, Mar 21, 2008 at 01:20:01PM +0100, Florian Weimer wrote: > >>> [EMAIL PROTECTED]:~ 148 $ openssl genrsa -out foo 512 >>> -rw-r--r-- 1 master master 493 mar 21 11:51 foo > >>> The generated key should really not be world-readable by default. > >> You could simply use

Bug#471958: openssl: Generated private keys world-readable by default

On Fri, Mar 21, 2008 at 01:20:01PM +0100, Florian Weimer wrote: >> [EMAIL PROTECTED]:~ 148 $ openssl genrsa -out foo 512 >> -rw-r--r-- 1 master master 493 mar 21 11:51 foo >> The generated key should really not be world-readable by default. > You could simply use a more restrictive umask. Yes,

Bug#471958: openssl: Generated private keys world-readable by default

* Lionel Elie Mamane: > [EMAIL PROTECTED]:~ 148 $ openssl genrsa -out foo 512 > Generating RSA private key, 512 bit long modulus > .. > .. > e is 65537 (0x10001) > [EMAIL PROTECTED]:~ 0 $ ls -l foo > -rw-r--r-- 1 master master 493 mar 21 11:51 foo > > The generated

Bug#471958: openssl: Generated private keys world-readable by default

Package: openssl Version: 0.9.8g-4 Severity: important Tags: security [EMAIL PROTECTED]:~ 148 $ openssl genrsa -out foo 512 Generating RSA private key, 512 bit long modulus .. .. e is 65537 (0x10001) [EMAIL PROTECTED]:~ 0 $ ls -l foo -rw-r--r-- 1 master master 493 m