mlichvar pushed to ntp (f21). "use larger RSA exponent in ntp-keygen"

[notifications at fedoraproject.org]

>From ad8f7c0316756e1090cb208fa0dbedd3d7cf58da Mon Sep 17 00:00:00 2001
From: Miroslav Lichvar <mlichvar at redhat.com>
Date: Thu, 26 Feb 2015 15:34:10 +0100
Subject: use larger RSA exponent in ntp-keygen


diff --git a/ntp-4.2.6p5-rsaexp.patch b/ntp-4.2.6p5-rsaexp.patch
new file mode 100644
index 0000000..4930ded
--- /dev/null
+++ b/ntp-4.2.6p5-rsaexp.patch
@@ -0,0 +1,21 @@
+diff -up ntp-4.2.6p5/util/ntp-keygen.c.rsaexp ntp-4.2.6p5/util/ntp-keygen.c
+--- ntp-4.2.6p5/util/ntp-keygen.c.rsaexp	2015-02-09 12:18:06.627127473 +0100
++++ ntp-4.2.6p5/util/ntp-keygen.c	2015-02-09 12:28:15.263780280 +0100
+@@ -882,7 +882,7 @@ gen_rsa(
+ 	FILE	*str;
+ 
+ 	fprintf(stderr, "Generating RSA keys (%d bits)...\n", modulus);
+-	rsa = RSA_generate_key(modulus, 3, cb, "RSA");
++	rsa = RSA_generate_key(modulus, 65537, cb, "RSA");
+ 	fprintf(stderr, "\n");
+ 	if (rsa == NULL) {
+ 		fprintf(stderr, "RSA generate keys fails\n%s\n",
+@@ -1223,7 +1223,7 @@ gen_gqkey(
+ 	fprintf(stderr,
+ 	    "Generating GQ parameters (%d bits)...\n",
+ 	     modulus2);
+-	rsa = RSA_generate_key(modulus2, 3, cb, "GQ");
++	rsa = RSA_generate_key(modulus2, 65537, cb, "GQ");
+ 	fprintf(stderr, "\n");
+ 	if (rsa == NULL) {
+ 		fprintf(stderr, "RSA generate keys fails\n%s\n",
diff --git a/ntp.spec b/ntp.spec
index 2c63080..7534e52 100644
--- a/ntp.spec
+++ b/ntp.spec
@@ -111,6 +111,8 @@ Patch29: ntp-4.2.6p5-cve-2014-9298.patch
 Patch30: ntp-4.2.6p5-sourceport.patch
 # ntpbz #2661
 Patch31: ntp-4.2.6p5-mreadvar.patch
+# ntpbz #730
+Patch32: ntp-4.2.6p5-rsaexp.patch
 
 # handle unknown clock types
 Patch50: ntpstat-0.2-clksrc.patch
@@ -235,6 +237,7 @@ This package contains NTP documentation in HTML format.
 %patch29 -p1 -b .cve-2014-9298
 %patch30 -p1 -b .sourceport
 %patch31 -p1 -b .mreadvar
+%patch32 -p1 -b .rsaexp
 
 # ntpstat patches
 %patch50 -p1 -b .clksrc
-- 
cgit v0.10.2


	http://pkgs.fedoraproject.org/cgit/ntp.git/commit/?h=f21&id=ad8f7c0316756e1090cb208fa0dbedd3d7cf58da