[Bug 218930] net-mgmt/nrpe: Use 2048-bit DH params

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Apr 28 11:39:39 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218930

            Bug ID: 218930
           Summary: net-mgmt/nrpe: Use 2048-bit DH params
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: zeising at FreeBSD.org
          Reporter: brnrd at freebsd.org
          Assignee: zeising at FreeBSD.org
             Flags: maintainer-feedback?(zeising at FreeBSD.org)

Created attachment 182152
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=182152&action=edit
svn diff for net-mgmt/nrpe

Current NRPE2 uses 512-bit DH parameters which is insecure. Upstream updated to
2048bit for 3.x see
https://github.com/NagiosEnterprises/nrpe/blob/maint/macros/ax_nagios_get_ssl#L298
Poor design to generate params during build but that has perpetuated into 3.x
as well.

Proposed commit log:
```
net-mgmt/nrpe: Use 2048-bit DH params

 - Add patches to upgrade 512 to 2048-bit DH params
 - Add LICENSE

PR: 
Approved by:
```

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list