Subject: Re: security/21983: [RFE] install /etc/moduli utilities qsieve + qsafe
To: William Allen Simpson <wsimpson@greendragon.com>
From: Luke Mewburn <lukem@netbsd.org>
List: tech-security
Date: 06/30/2003 14:35:47
On Sun, Jun 29, 2003 at 02:38:12PM -0400, William Allen Simpson wrote:
| Since I haven't heard anything from filing the PR, I'll try an open
| list. The file /etc/moduli was/is generated by a couple of programs,
| originally part of Photuris. The file is still used by OpenSSH.
|
| Technically, they are homeless. Where should they be housed?
|
| They should be used from time to time to update the moduli. They
| aren't actually "crypto". But the moduli.5 definition is with ssh.
Is there a current canonical location for the source to these two programs?
Is updating the moduli file something that we should do on a per major
(or minor) release basis?
(At first glance these could either go in src/usr.bin or othersrc/)
Luke.