[Pkg-puppet-devel] Bug#620739: Bug#620739: closed by Stig Sandbeck Mathisen <ssm at debian.org> (key length increased in puppet 2.7.12)

Bastian Blank waldi at debian.org
Sun Jul 1 12:42:01 UTC 2012


severity 620739 grave
thanks

On Sun, Mar 25, 2012 at 03:19:31PM +0200, Stig Sandbeck Mathisen wrote:
> Bastian Blank <waldi at debian.org> writes:
> > And what about the hash? Any help in replacing unsafe existing
> > certificates?

It now uses SHA1 to sign certificates. SHA1 is not longer considered
save for use over five years.

Security is hard, so if you lack knowledge, don't ignore the people
telling you what you've doing wrong. This means I may NMU this without
further warning.

Bastian

-- 
Killing is stupid; useless!
		-- McCoy, "A Private Little War", stardate 4211.8





More information about the Pkg-puppet-devel mailing list