Filed Under (Hardening, Security, software livre) by rafaelgomes on 20-11-2009
Com a descoberta da falha de renegociação em tráfego criptografado com SSL, e seus derivados, muitos dos serviços que utilizam esse protocolo ficaram também vulneráveis, pois como é uma falha no processo da comunicação cifrada, não há muito o que ser feito, a não ser corrigir o protocolo utilizado.
Para maiores detalhes sobre a falha da renegociação, veja esse link.
O Openvpn, que é um dos serviços que utilizam o OpenSSL, um dos derivados do SSL, lança hoje sua nova versão (2.1_rc22), com duas importantes mudanças:
1 – Remoção da SSL/TLS renegotiation, porém essa remoção não afetas outras funcionalidades do tipo mid-session SSL/TLS renegotation e afins.
2 – Hardening para mid-session SSL/TLS renegotation e similares, forçando a criação de uma nova sessão a partir do zero.
Obs: Para quem sofreu com a instalação do cliente do Openvpn no Vista até perceber que o mesmo deveria rodar no modo administrador, pode ficar tranquilo, pois esse problema também foi resolvido.
Veja outras novidades nesse link.
Até o presente momento, nem o Arch, Fedora ou Debian tinham empacotado essa nova versão do OpenVPN, quem estava mais próximo é o Debian Sid com a versão 2.1~rc21-2.
[...] em: http://openvpn.net/index.php/open-source/downloads.html Para mais informações: http://techfree.com.br/wordpre…]pn-novo-sem-renegotiation-flaw Postada por: Rafael Gomes, rafaelgomes(ARROBA)techfree.com.br CategoriasUncategorized [...]
[...] 1 – Remoção da SSL/TLS renegotiation, porém essa remoção não afetas outras funcionalidades do tipo mid-session SSL/TLS renegotation e afins. 2 – Hardening para mid-session SSL/TLS renegotation e similares, forçando a criação de uma nova sessão a partir do zero.” [referência: techfree.com.br] [...]
Hello everyone
First of all sorry that I write in this topic but I have some technical problem with the use of this forum. When I’m trying to enter in the appropriate topic, I received a 404 error It’s about the only topic in which I was able to enter. Do you have the same problems? What’s going on?
I like the helpful information you provide in your articles. I will bookmark your blog and check again here frequently. I am quite sure I will learn plenty of new stuff right here! Best of luck for the next!
Solid write-up, can you does indeed view typically make will also be this kind produce in the online store?
Your comment is hopeless as well as your entire zgagablog. Rather, I will not go further forward, there is not time for my
Hi! I just wanted to ask if you ever have any problems with hackers? My last blog (wordpress) was hacked and I ended up losing months of hard work due to no back up. Do you have any methods to protect against hackers?
I’d should verify with you here. Which isn’t something I normally do! I get pleasure from reading a post that can make individuals think. Additionally, thanks for allowing me to remark!
Usually I do not read article on blogs, but I wish to say that this write-up very forced me to try and do so! Your writing style has been surprised me. Thanks, quite nice post.
Thanks, I have recently been looking for information on this subject for a long time and yours is better I actually?ve uncovered at this point.
At the beginning, the suitcases were designed with emphasis on solving the practical problems of travelers with functional lv purse design idea; this kind of traveling luggage quickly became the preferred selection of aristocracy in Paris.
There can be nothing better to please yourself with a nice louis vuitton australia for sure.
Great blog you have here. Many blogs like yours cover subjects that can’t be found in print. I don’t know how we got on 15 years ago with just magazines and newspapers.
and also Chanel bags can be around the major of the list http://fationhandbags.blinkweb.com/1/2012/05/evaluating-this-insanity-workout-utmost-interval-training-workouts-program-63248/ What exactly shows up as being a aspect advantage could be the assurance which you
Brilliant publish and handy info. I do think this is just what I just read somewhere but We dont know along with your own expertise
Nice post. I be taught one thing more difficult on different blogs everyday. It is going to all the time be stimulating to read content material from other writers and apply just a little something from their store. I’d prefer to use some with the content material on my weblog whether you don’t mind. Natually I’ll provide you with a hyperlink in your internet blog. Thanks for sharing.
Respectable assemblage. I discover something statesman stimulating on crystalline blogs . It leave e’er be to noesis off their writers and practise a something from their fund. I’d select to use with all the proportionality in my infinitesimal weblog whether you do not cognition. Natually I’ll offer a contact on your own net weblog. Umpteen thanks distribution.
Very soon this website will be famous amid all blogging and
site-building users, due to it’s nice articles or reviews