Date: Sat, 27 Oct 2018 13:40:52 +0000 From: Alexey Dokuchaev <danfe@freebsd.org> To: Conrad Meyer <cem@freebsd.org> Cc: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r339784 - head/sbin/dumpon Message-ID: <20181027134052.GB40528@FreeBSD.org> In-Reply-To: <201810261954.w9QJs05X054833@repo.freebsd.org> References: <201810261954.w9QJs05X054833@repo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Oct 26, 2018 at 07:54:00PM +0000, Conrad Meyer wrote: > New Revision: 339784 > URL: https://svnweb.freebsd.org/changeset/base/339784 > > Log: > dumpon(8): Provide seatbelt against weak RSA keys > > ... > +#if OPENSSL_VERSION_NUMBER >= 0x10100000L > + if (RSA_security_bits(pubkey) < 112) > +#else > + if (RSA_size(pubkey) * 8 < 2048) > +#endif Shouldn't the check be against 0x10100005L (that is, 1.1.0-pre5) to be precise? ./danfe
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20181027134052.GB40528>