[compromised] RSA key

[compromised] RSA key

[Antoniu Pop]

[-- Attachment #1: Type: text/plain, Size: 244 bytes --]

Hi,

I might have been affected by the Debian issue on key generation and I
suppose that my key was removed for that reason. I cannot update my
key as all ssh connections fail.
Could you please add my new key ?

Many thanks in advance,
Antoniu

[-- Attachment #2: id_rsa.pub --]
[-- Type: application/octet-stream, Size: 2780 bytes --]

ssh-rsa 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 apop@gamma

Re: [compromised] RSA key

[Christopher Faylor]

On Tue, May 27, 2008 at 01:15:39PM +0200, Antoniu Pop wrote:
>Hi,
>
>I might have been affected by the Debian issue on key generation and I
>suppose that my key was removed for that reason. I cannot update my
>key as all ssh connections fail.
>Could you please add my new key ?

Please use this command:

ssh sourceware.org 'replacekey' < newkey

Re: [compromised] RSA key

[Antoniu Pop]

Hi,

I just tried and it still refuses my connection ... my old key is not
accepted (nor is the new one).

Antoniu

On Tue, May 27, 2008 at 3:45 PM, Christopher Faylor
<cgf-use-the-mailinglist-please@sourceware.org> wrote:
> On Tue, May 27, 2008 at 01:15:39PM +0200, Antoniu Pop wrote:
>>Hi,
>>
>>I might have been affected by the Debian issue on key generation and I
>>suppose that my key was removed for that reason. I cannot update my
>>key as all ssh connections fail.
>>Could you please add my new key ?
>
> Please use this command:
>
> ssh sourceware.org 'replacekey' < newkey
>

Re: [compromised] RSA key

[Christopher Faylor]

On Tue, May 27, 2008 at 03:52:43PM +0200, Antoniu Pop wrote:
>Hi,
>
>I just tried and it still refuses my connection ... my old key is not
>accepted (nor is the new one).

Checking your authorized_keys file, I see that you're one of the people
who had been previously identified as having a weak key.  I didn't realize
that you'd already received email about this.

I've replaced your key with the one that you just sent.

cgf

Re: [compromised] RSA key

[Antoniu Pop]

Thanks !

Actually i haven't received an email yet, but I know I generated the
key with the bugged version of openssl.

Antoniu

On Tue, May 27, 2008 at 4:09 PM, Christopher Faylor
<cgf-use-the-mailinglist-please@sourceware.org> wrote:
> On Tue, May 27, 2008 at 03:52:43PM +0200, Antoniu Pop wrote:
>>Hi,
>>
>>I just tried and it still refuses my connection ... my old key is not
>>accepted (nor is the new one).
>
> Checking your authorized_keys file, I see that you're one of the people
> who had been previously identified as having a weak key.  I didn't realize
> that you'd already received email about this.
>
> I've replaced your key with the one that you just sent.
>
> cgf
>