[Bug 3375] SHA1 is used as a proof of possession for the RSA key

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Jan 3 21:52:21 AEDT 2022


https://bugzilla.mindrot.org/show_bug.cgi?id=3375

Dmitry Belyavskiy <dbelyavs at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P5                          |P3

--- Comment #5 from Dmitry Belyavskiy <dbelyavs at redhat.com> ---
I suggest to increase the priority. The problem occurs when we use
OpenSSL in FIPS mode, so signing a SHA1 hash becomes not an option.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list