[ntp] use larger RSA exponent in ntp-keygen

Miroslav Lichvar mlichvar at fedoraproject.org
Thu Feb 26 14:51:32 UTC 2015


commit ad8f7c0316756e1090cb208fa0dbedd3d7cf58da
Author: Miroslav Lichvar <mlichvar at redhat.com>
Date:   Thu Feb 26 15:34:10 2015 +0100

    use larger RSA exponent in ntp-keygen

 ntp-4.2.6p5-rsaexp.patch | 21 +++++++++++++++++++++
 ntp.spec                 |  3 +++
 2 files changed, 24 insertions(+)
---
diff --git a/ntp-4.2.6p5-rsaexp.patch b/ntp-4.2.6p5-rsaexp.patch
new file mode 100644
index 0000000..4930ded
--- /dev/null
+++ b/ntp-4.2.6p5-rsaexp.patch
@@ -0,0 +1,21 @@
+diff -up ntp-4.2.6p5/util/ntp-keygen.c.rsaexp ntp-4.2.6p5/util/ntp-keygen.c
+--- ntp-4.2.6p5/util/ntp-keygen.c.rsaexp	2015-02-09 12:18:06.627127473 +0100
++++ ntp-4.2.6p5/util/ntp-keygen.c	2015-02-09 12:28:15.263780280 +0100
+@@ -882,7 +882,7 @@ gen_rsa(
+ 	FILE	*str;
+ 
+ 	fprintf(stderr, "Generating RSA keys (%d bits)...\n", modulus);
+-	rsa = RSA_generate_key(modulus, 3, cb, "RSA");
++	rsa = RSA_generate_key(modulus, 65537, cb, "RSA");
+ 	fprintf(stderr, "\n");
+ 	if (rsa == NULL) {
+ 		fprintf(stderr, "RSA generate keys fails\n%s\n",
+@@ -1223,7 +1223,7 @@ gen_gqkey(
+ 	fprintf(stderr,
+ 	    "Generating GQ parameters (%d bits)...\n",
+ 	     modulus2);
+-	rsa = RSA_generate_key(modulus2, 3, cb, "GQ");
++	rsa = RSA_generate_key(modulus2, 65537, cb, "GQ");
+ 	fprintf(stderr, "\n");
+ 	if (rsa == NULL) {
+ 		fprintf(stderr, "RSA generate keys fails\n%s\n",
diff --git a/ntp.spec b/ntp.spec
index 2c63080..7534e52 100644
--- a/ntp.spec
+++ b/ntp.spec
@@ -111,6 +111,8 @@ Patch29: ntp-4.2.6p5-cve-2014-9298.patch
 Patch30: ntp-4.2.6p5-sourceport.patch
 # ntpbz #2661
 Patch31: ntp-4.2.6p5-mreadvar.patch
+# ntpbz #730
+Patch32: ntp-4.2.6p5-rsaexp.patch
 
 # handle unknown clock types
 Patch50: ntpstat-0.2-clksrc.patch
@@ -235,6 +237,7 @@ This package contains NTP documentation in HTML format.
 %patch29 -p1 -b .cve-2014-9298
 %patch30 -p1 -b .sourceport
 %patch31 -p1 -b .mreadvar
+%patch32 -p1 -b .rsaexp
 
 # ntpstat patches
 %patch50 -p1 -b .clksrc


More information about the scm-commits mailing list