Hi, Vineet Kumar wrote:
I'm a bit concerned about the many 1024-bit RSA keys I have on my system. To be on the safe side, I'm removing them and replacing them with newly-generated 2048-bit keys. I wonder though, why there's no blacklist.RSA-1024 in theopenssh-blacklist package?
I took RSA 1023, 1024, 2047bit key figerprints from: http://metasploit.com/users/hdm/tools/debian-openssl/ and added them to the openssh-blacklist package: http://staff.cesnet.cz/~semik/openssh-blacklist/ Best regards -- ----------------------- Jan Tomasek aka Semik http://www.tomasek.cz/