Add checks for ROCA-vulnerable RSA keys

InCommon · Oct 18, 2017 · ffac2b8 · ffac2b8
1 parent 1693bdc
commit ffac2b8
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 0 deletions.
diff --git a/mdx/common-beans.xml b/mdx/common-beans.xml
@@ -1037,6 +1037,8 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="mda.X509RSAExponentValidator"/>
+                            <!-- Error on keys vulnerable to ROCA. -->
+                            <bean p:id="ROCA" parent="ukf.X509ROCAValidator"/>
 
                             <!--
                                 Debian weak key blacklists.

diff --git a/mdx/uk/beans.xml b/mdx/uk/beans.xml
@@ -306,6 +306,8 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="mda.X509RSAExponentValidator"/>
+                            <!-- Error on keys vulnerable to ROCA. -->
+                            <bean p:id="ROCA" parent="ukf.X509ROCAValidator"/>
 
                             <!--
                                 Debian weak key blacklists.

diff --git a/mdx/uk/verbs.xml b/mdx/uk/verbs.xml
@@ -314,6 +314,8 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="mda.X509RSAExponentValidator"/>
+                            <!-- Error on keys vulnerable to ROCA. -->
+                            <bean p:id="ROCA" parent="ukf.X509ROCAValidator"/>
 
                             <!--
                                 Debian weak key blacklists.

diff --git a/tools/ukf-mda/ukf-mda-0.9.5.jar → tools/ukf-mda/ukf-mda-0.9.6.jar b/tools/ukf-mda/ukf-mda-0.9.5.jar → tools/ukf-mda/ukf-mda-0.9.6.jar