[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: leakage of keys?



On Mittwoch, 14. Mai 2008, Nicolas Rachinsky wrote:
> Does this affect other protocols? ssl/ipsec/openvpn (with
> certificates)

IPSec: yes, most probably. To be sure when using open/strongswan, run 

rm /etc/ipsec.d/private/`hostname`Key.pem /etc/ipsec.d/certs/`hostname`Cert.pem
dpkg-reconfigure (open|strong)swan
/etc/init.d/ipsec restart

and re-create all manually generated X.509 certificates as well. All other 
uses of SSL (that includes OpenVPN) also seem to be vulnerable.

best regards,
Rene

-- 
-------------------------------------------------
Gibraltar firewall       http://www.gibraltar.at/

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: