<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Tue, Apr 8, 2014 at 2:03 PM, Harald Hanche-Olsen <span dir="ltr"><<a href="mailto:hanche@math.ntnu.no" target="_blank">hanche@math.ntnu.no</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">But ssh does not use the openssl libraries, so there is no point, as<br>
this bug will not have exposed the ssh host keys.<br></blockquote><div><br></div><div>Actually, it does use the libraries. But only for crypto; it does not use the SSL protocol at all, and SSL-specific protocol/extension bugs (which this is) are not relevant.</div>
</div><div><br></div>-- <br><div dir="ltr"><div>brandon s allbery kf8nh sine nomine associates</div><div><a href="mailto:allbery.b@gmail.com" target="_blank">allbery.b@gmail.com</a> <a href="mailto:ballbery@sinenomine.net" target="_blank">ballbery@sinenomine.net</a></div>
<div>unix, openafs, kerberos, infrastructure, xmonad <a href="http://sinenomine.net" target="_blank">http://sinenomine.net</a></div></div>
</div></div>