What is the "openssh-blacklist" package? Is it related to the Debians OpenSSL bug?


Yes it is related to the Debian OpenSSL "bug". It contains a list of of all DSA-1024 and RSA-2048 keys generated by a Debian sabotaged OpenSSL PRNG.


Using the ssh-vulnkey you can check private key against this database. E.g. to check your (ssh) private key use

 $ ssh-vulnkey -v .ssh/id_rsa

For the server key

 # ssh-vulnkey -v /etc/ssh/ssh_host_rsa_key

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.