Re: openssl / x509 certs

5 msg	DSA/DSS keys and DSA 1576-1/CVE-2008-0166.
2 msg	openssl/openssh fixes for lenny (testing)

openssl / x509 certs
\ Hr. Philip Rueegsegger (14 May 2008)
. \ Scott Edwards (15 May 2008)

2 msg	leakage of keys?
2 msg	dowkd.pl - how the blacklist data is generated ?
9 msg	Re: [SECURITY] [DSA 1576-1] New openssh package...
4 msg	dowkd.pl via Package
1 msg	CHAO BAN
48 msg	Re: [SECURITY] [DSA 1571-1] New openssl package...
4 msg	Broken link on Debian CVE Web page (Was: [SECUR...
11 msg	Re: [SECURITY] [DSA 1571-1] New openssl package...
3 msg	Re: [SECURITY] [DSA 1575-1] New Linux 2.6.18 pa...
1 msg	Mystery of Lyle & Louise is Making Headlines
1 msg	Herr Bühler Arbeite nicht mehr bei der V-ZUG AG
5 msg	Re: [SECURITY] [DSA 1573-1] New php5 packages f...
4 msg	Re: [SECURITY] [DSA 1572-1] New php5 packages f...
3 msg	Question about Security
37 msg	securing server
1 msg	Re: [SECURITY] [DSA 1570-1] New kazehakase pack...
2 msg	Re: [SECURITY] [DSA 1569-1] New cacti packages ...

Subject:	Re: openssl / x509 certs
Group:	Debian-security
From:	Scott Edwards
Date:	15 May 2008

On Wed, May 14, 2008 at 11:09 AM, Hr. Philip Rueegsegger <rue>
wrote:

> How can I check if a rsa key created by 'openssl genrsa ...' and its x509
> certificate is vulnerable ? The utility ssh-vulnkey seems to only check ssh
> keys. Thanks in advance !
>

What CVE IDs does this apply to, and are there any references to tools for
this task on ssl certs as well?

I'm curious too (with no time on my hands with finals all this week)

TIA

Scott