[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[debian-users:50532] Re: 【注意喚起】 Openssl 脆弱性に伴う ssh 鍵、ssl 証明書などの問題について
- From: fubabz <fubabz@xxxxxxxxx>
- Subject: [debian-users:50532] Re: 【注意喚起】 Openssl 脆弱性に伴う ssh 鍵、ssl 証明書などの問題について
- Date: Sun, 18 May 2008 00:05:44 +0900
- Content-disposition: inline
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=uy4xcbCL43l7QIerNvb6D9HPDXKpxAPMBnqzF5ugkDY=; b=SZVepxp+x/DutaIwd5QG/SSSGNTYStGMSmBRhq9swx7U4kLl3n5QjCP75do1NQYjyKVehWwywxW2fTWUqIE1uXlVLDLQXJzAExVfA6Ozz02KRHX8ePkmGBakzmssJsR0YiFvbNH9SyttqpoFUdZ7xjqZS1pkhlHz6XcMRiG/o7I=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=pSYMrVy2v/Au3izH4HKBLqymCLVy1p7VvybVuAnFvHUisbI1Y1CX39Ppz+iPTwdg1OcBBx3gWR2exALuR6d/Pgdauo7xw82JSgjOogxx6aiCJL06NGVz+2pQioPkne8dlvPDraomwSQMXvAWFu+4i6C5uyZKeuR9qesCamzgFPg=
- List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
- List-id: debian-users.debian.or.jp
- List-owner: <mailto:debian-users-admin@debian.or.jp>
- List-post: <mailto:debian-users@debian.or.jp>
- List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
- List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
- X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
- X-ml-name: debian-users
- X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
- X-spam-checker-version: SpamAssassin 3.1.7-deb (2006-10-05) on osdn.debian.or.jp
- X-spam-level:
- X-spam-status: No, score=-0.9 required=10.0 tests=KI,SUBJECT_ENCODED_TWICE autolearn=disabled version=3.1.7-deb
- References: <f82a151e0805132020k7593de77nb1f48472a9a80f7@xxxxxxxxxxxxxx>
- Message-id: <6827c8970805170805k12b6a489te7460dfa83b764c5@xxxxxxxxxxxxxx>
- X-mail-count: 50532
佐久間といいます。
DSA-1576-1によるとopensshアップグレード時に、SSHサーバ鍵は確認後自動更新されるとありますが(実際当方サイトでもそうなりました)、以下も必要なのでしょうか?
2008/5/14 Hideki Yamane <henrich@debian.or.jp>:
> 参考までに、当方では以下のような形で ssh サーバの鍵を作り直しました
> ~$ cd /etc/ssh/
> /etc/ssh$ sudo mkdir vulnerablekeys_dir
> /etc/ssh$ sudo mv ssh_host_*key* vulnerablekeys_dir/ (古い鍵を移動)
> /etc/ssh$ sudo dpkg-reconfigure openssh-server (新しい鍵を生成)
>
> これで ssh サーバ側の対処は終わりです。
--
-- sakuma