|
|
|||||||
| Chit Chat Public Talk about any thing you want! This forum is public. |
 |
|
|
Thread Tools | Search this Thread | Display Modes |
|
#1
02-21-2003, 07:05 PM
|
||||||||||||
|
||||||||||||
|
When do you plan on upgrading to a safer SSL?
We're still running the unsecure 0.9.6g on freeBSD.
|
|
#2
02-21-2003, 11:37 PM
|
|||||||||||
|
|||||||||||
|
What are you talking about?
|
|
#3
02-22-2003, 07:09 AM
|
||||||||||||
|
||||||||||||
|
A swiss security lab has shown that it was possible to monitor an SSL connection and get passwords.
This affects all OpenSSL versions prior to 0.9.6i or 0.9.7a It's on all serious security lists. So right now, SSL is useless to protect anything but one time credit card transactions.
|
|
#4
02-22-2003, 07:30 AM
|
|||||||||||
|
|||||||||||
|
Damn swiss..
|
|
#5
02-22-2003, 11:29 AM
|
||||||||||||
|
||||||||||||
|
Hehe
|
|
#6
02-22-2003, 12:34 PM
|
|||||||||||
|
|||||||||||
|
I will have the unix admin's check it out.. What version did they say was good any?
|
|
#7
02-22-2003, 07:41 PM
|
|||||||||||
|
|||||||||||
|
http://www.cert.org/advisories/CA-2002-23.html is the latest OpenSSL Advisory.
|
|
#8
02-23-2003, 09:45 AM
|
||||||||||||
|
||||||||||||
|
That advisory is an old one.
Here is the official one from OpenSSL http://www.openssl.org/news/secadv_20030219.txt
|
|
#10
02-23-2003, 07:13 PM
|
|||||||||||
|
|||||||||||
|
Looks like Psoft is going to have to do this. They have there own installed something custom so we don't want to go and mess it up. If someone wants they can post it on there site so they can get it fixed.
|
|
#11
02-26-2003, 07:23 PM
|
||||||||||||
|
||||||||||||
THe new files are here
http://www.psoft.net/shiv/files/packages.html
|
|
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | Search this Thread |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Any chance of upgrading PERL? | AgentHi5 | Chit Chat Public | 1 | 01-22-2004 04:40 AM |
Linear Mode
