pkgsrc-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

pkg/39646: security/ssldump doesn't support AES



>Number:         39646
>Category:       pkg
>Synopsis:       security/ssldump doesn't support AES
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Sep 29 02:45:00 +0000 2008
>Originator:     Lloyd Parkes
>Release:        NetBSD 4.0
>Organization:
Inland Revenue
>Environment:
NetBSD netbsd.XXX 4.0 NetBSD 4.0 (GENERIC) #0: Sun Dec 16 00:20:10 PST 2007  
builds@wb34:/home/builds/ab/netbsd-4-0-RELEASE/i386/200712160005Z-obj/home/builds/ab/netbsd-4-0-RELEASE/src/sys/arch/i386/compile/GENERIC
 i386
>Description:
security/ssldump is unable to decrypt the AES cipher. Given that all modern 
HTTPS clients and servers use AES, this is a problem.
>How-To-Repeat:
Run it on a packet capture and see it complain about unknown ciphers.
>Fix:
The following base64 uuencoded gzipped patch will add Tom McLaughlin's AES 
patch (which he may have swiped from elsewhere) to security/ssldump.

begin-base64 644 mypatch.gz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====



Home | Main Index | Thread Index | Old Index