What is the "openssh-blacklist" package? Is it related to the Debians OpenSSL bug?
asked Apr 28, 2011 at 21:23
-
1FYI, subject package dropped as of Debian Stretch (see here).– DiggerCommented Dec 20, 2021 at 21:18
Add a comment
|
2 Answers
Yes it is related to the Debian OpenSSL "bug". It contains a list of of all DSA-1024 and RSA-2048 keys generated by a Debian sabotaged OpenSSL PRNG.
Using the ssh-vulnkey you can check private key against this database. E.g. to check your (ssh) private key use
$ ssh-vulnkey -v .ssh/id_rsa
For the server key
# ssh-vulnkey -v /etc/ssh/ssh_host_rsa_key
