package (tinyca2) not longer present in F15, what to do about it?

Chris Adams cmadams at hiwaay.net
Tue Aug 9 15:40:03 UTC 2011


Once upon a time, Stephen Gallagher <sgallagh at redhat.com> said:
> I find it very difficult to believe that at no time in the last five
> years that no security vulnerabilities could have been identified in a
> Certificate Authority.

Please stop unfounded fearmongering.

All TinyCA does is call out to OpenSSL command line utilities.  IIRC it
uses a private tmp directory to avoid any potential issues with tmp
files; that's about the only potential security issue I can think of.
-- 
Chris Adams <cmadams at hiwaay.net>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.


More information about the users mailing list