Skip site navigation (1)Skip section navigation (2)
Date:      28 May 2000 18:47:07 +0200
From:      naddy@mips.inka.de (Christian Weisgerber)
To:        freebsd-questions@freebsd.org
Subject:   Re: 4.0-STABLE Secure: ssh limited to 1024 bits by RSAREF
Message-ID:  <8griib$sn6$1@bigeye.mips.inka.de>
References:  <lfhfbi653v.fsf@Samizdat.uucom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Chris Shenton <cshenton@uucom.com> wrote:

> One site I'm trying to "ssh" to a system running F-Secure's SSH daemon
> with a host key that's 1152 bits, but /usr/bin/ssh can't connect
> because the RSAREF limits me to 1024 bits:

Yep.

> Before doing the "make world", in /etc/defaults/make.conf I set:
> 
>  RSAREF= NO

I think only RSAREF=YES has any meaning.

>  USA_RESIDENT= NO

That should do the trick assuming you have the international crypto
distribution. You can get those from cvsup.internat.freebsd.org or
various international mirrors, e.g. cvsup[123].de.freebsd.org.

Note that if you are in the US, using the non-RSAREF implementation
will put you in violation of RSA Inc.'s patent, as will using RSAREF
for commercial purposes.

-- 
Christian "naddy" Weisgerber                          naddy@mips.inka.de



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8griib$sn6$1>