key rollover: dropbear, bincimap
Another two packages:
dropbear
========
If you have /etc/ssh/*host* keys, either remove them, or follow the
openssh instructions below, first, before updating dropbear's
keys.
Dropbear's postinst converts existing openssh keys to dropbear format,
if it cannot find the dropbear host keys.
rm /etc/dropbear/*_host_key
dpkg-reconfigure dropbear
Note that keys that have been generated by Dropbear itself are not
vulnerable (it uses libtomcrypt rather than OpenSSL).
bincimap
========
The bincimap package automatically creates a self-signed certificate
through the openssl program for the bincimap-ssl service, and puts it
into /etc/ssl/certs/imapd.pem. To regenerate run:
rm -f /etc/ssl/certs/imapd.pem
dpkg-reconfigure bincimap
Reply to: