Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Options
Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

Options

Topic review

martin

Re: MS Advisory 2661254, RSA keys < 1024

WinSCP does not call into CertGetCertificateChain.
phhowe17

MS Advisory 2661254, RSA keys < 1024

Does the above change which MS will be releasing with the Oct 2012 patch Tuesday cycle have any impact on WinSCP? Per the KB:

This update impacts applications and services that use RSA
keys for cryptography and call into the CertGetCertificateChain function.

See https://learn.microsoft.com/en-us/security-updates/securityadvisories/2012/2661254

I suspect not due to your use of OpenSSL, but need to ask to dot I's and cross T's on our project.