Tag Archives: ssl

Weak SSL key vulnerabilities not so funny

Posted by Herman on 14 May, 2008 6 comments

Yesterday evening I had the pleasure to pick up the following three security notices: [USN-612-1] OpenSSL vulnerability [USN-612-2] OpenSSH vulnerability [USN-612-3] OpenVPN vulnerability I can tell you these are really not funny. They really generate a lot of work indirectly. Annoying but doable are things like regeneration SSH keys. The PITA situation is with OpenVPN, [...]

SSL Support *GRR*

Posted by Herman on 12 December, 2005 0 comments

Before I already encountered disabled SSL support in packages (vsftpd, gftp, yafc, etc.). Today I wanted to give mail-notification a try and encountered the same issue. Apparantly SSL is disabled here because of licensing issues. Treenaks notes that the OpenSSL libs are not compatible with the GPL and that GNUTLS has an OpenSSL-compatibility layer (but [...]