Welcome! Log In Create A New Profile

Advanced

Re: OT: OpenSSL 1.0.1f

coderman
January 07, 2014 12:38PM
On Mon, Jan 6, 2014 at 2:04 PM, Lukas Tribus <luky-37@hotmail.com> wrote:
> Hi,
>
>
>> It does not look like 1.0.1f changed the default behavior of
>> ENGINE_rdrand (coderman's been following it).
>
> Yes it did, rdrand is no longer enabled by default. Here [1] is
> the backport in the OpenSSL_1_0_1-stable head [2].
>
> At least Debian [3] and Ubuntu backported this as well.


OpenSSL makes ZERO mention of this fix anywhere in the 1.0.1f release
itself, only the git history itself provides clue. Tor released an
update to intentionally work around this issue with notice to relay
and hidden service operators who may have been affected; Debian and
Ubuntu disabled via backport, and explicitly called this out in their
security errata (thank you all!).

however, debian and ubuntu neglected to mention packages that may have
been affected by generating long lived keys during a vulnerable
configuration (boo!).

in any case, end result: use 1.0.1f and be happy


best regards,

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

OT: OpenSSL 1.0.1f

Jeffrey Walton January 06, 2014 03:42PM

Re: OT: OpenSSL 1.0.1f

Rob Stradling January 06, 2014 04:04PM

Re: OT: OpenSSL 1.0.1f

Rob Stradling January 07, 2014 05:00AM

RE: OT: OpenSSL 1.0.1f

Lukas Tribus January 06, 2014 05:06PM

Re: OT: OpenSSL 1.0.1f

coderman January 07, 2014 12:38PM

Re: OT: OpenSSL 1.0.1f

coderman January 07, 2014 12:42PM

Re: OT: OpenSSL 1.0.1f

itpp2012 January 07, 2014 02:43PM

Re: OT: OpenSSL 1.0.1f

itpp2012 January 08, 2014 05:08AM

Re: OT: OpenSSL 1.0.1f

Aidan Scheller January 09, 2014 12:18AM

Re: OT: OpenSSL 1.0.1f

itpp2012 January 09, 2014 03:51AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 142
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready