| Summary: | net-analyzer/nagios-nrpe does generating dh.h file (in ebuild) have any influence for securing nrpe? | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Marcin Mirosław <bug> |
| Component: | Current packages | Assignee: | Gentoo Netmon project <netmon> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | gentoo, idl0r |
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | 410891 | ||
| Bug Blocks: | |||
Is there any progress with this bug? Fixed in net-analyzer/nagios-nrpe-2.13. Thanks! Thanks! |
Lines from ebuild (they are before econf): "# Generate the dh.h header file for better security (2005 Mar 20 eldad) if useq ssl ; then openssl dhparam -C 512 | sed -n '1,/BEGIN DH PARAMETERS/p' | grep -v "BEGIN DH PARAMETERS" > "${S}"/src/dh.h fi " grep dhparam from configure script: $sslbin dhparam -C 512 | awk '/^-----/ {exit} {print}' > include/dh.h Are those files (src/dh.h and incluede/dh/h) used both? I suppose no: rm src/dh.h & compile cleanly but when i remove file include/dh.h (and only form include dir) make's failed. Reproducible: Always