[Pkg-openssl-devel] [SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator

[Gerfried Fuchs]

Am Mittwoch, den 14.05.2008, 09:35 +0200 schrieb Rene Mayrhofer:
> rm /etc/ssh/ssh_host_*
> dpkg-reconfigure openssh-server
> /etc/init.d/ssh restart

 FWIW, the dpkg-reconfigure openssh-server does the restart implicitly,
you don't need to explicitly do a restart afterwards, again.

> Who is currently responsible for updating the (currently empty) 
> http://www.debian.org/security/key-rollover/? Please add these instructions 
> for openssh and (open|strong)swan as soon as possible. 

 I've asked several times on #debian-security about what to add to
there, a question to team at security got unanswered so far, too. I would
be fine to add any informations, I just don't like linking to a wiki
page[1] for security related informations unless explicitly told that
that's the only way to go - it just feels wrong. Noone said that
converting that wiki page to the website would be the right thing to do,
neither.

 So long,
Rhonda
[1] http://wiki.debian.org/SSLkeys

P.S.: Sorry to the people that are in Cc and might receive that in
double, I am not sure whom or what lists should be removed here like I
usually do.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20080514/48afa277/attachment.pgp