Subject: Re: security/21983: [RFE] install /etc/moduli utilities qsieve + qsafe
To: William Allen Simpson <wsimpson@greendragon.com>
From: Luke Mewburn <lukem@netbsd.org>
List: tech-security
Date: 06/30/2003 14:35:47
On Sun, Jun 29, 2003 at 02:38:12PM -0400, William Allen Simpson wrote:
  | Since I haven't heard anything from filing the PR, I'll try an open 
  | list.  The file /etc/moduli was/is generated by a couple of programs, 
  | originally part of Photuris.  The file is still used by OpenSSH.  
  | 
  | Technically, they are homeless.  Where should they be housed?
  | 
  | They should be used from time to time to update the moduli.  They 
  | aren't actually "crypto".  But the moduli.5 definition is with ssh.

Is there a current canonical location for the source to these two programs?

Is updating the moduli file something that we should do on a per major
(or minor) release basis?

(At first glance these could either go in src/usr.bin or othersrc/)

Luke.