What is the "openssh-blacklist" package? Is it related to the Debians OpenSSL bug?
Tell me more
×
IT Security Stack Exchange is a question and answer site for
IT security professionals. It's 100% free, no registration required.
|
Yes it is related to the Debian OpenSSL "bug". It contains a list of of all DSA-1024 and RSA-2048 keys generated by a Debian sabotaged OpenSSL PRNG. |
|||
|
|
|
Using the ssh-vulnkey you can check private key against this database. E.g. to check your (ssh) private key use For the server key |
|||
|
|
