svn commit: r339784 - head/sbin/dumpon

Alexey Dokuchaev danfe at freebsd.org
Sat Oct 27 13:40:52 UTC 2018


On Fri, Oct 26, 2018 at 07:54:00PM +0000, Conrad Meyer wrote:
> New Revision: 339784
> URL: https://svnweb.freebsd.org/changeset/base/339784
> 
> Log:
>   dumpon(8): Provide seatbelt against weak RSA keys
>   
> ...
> +#if OPENSSL_VERSION_NUMBER >= 0x10100000L
> +	if (RSA_security_bits(pubkey) < 112)
> +#else
> +	if (RSA_size(pubkey) * 8 < 2048)
> +#endif

Shouldn't the check be against 0x10100005L (that is, 1.1.0-pre5) to be
precise?

./danfe


More information about the svn-src-all mailing list