Re: Fortifying RedHat's Netscape RPM

[Nick Urbanik]

Kirk Taylor wrote:

> I have the latest RPM for Netscape Communicator 4.7 from RedHat
> (netscape-communicator-4.7-1.1
> and common) installed.

hmm, I have (from Red Hat updates to 7.0):
rpm -qa | grep netscape
netscape-communicator-4.76-1
netscape-common-4.76-1

>  I downloaded the latest x86 Unix patch (v1.4.5)
> and unpacked it.

When I click on the padlock icon in the bottom left corner of Netscape,
then click on Navigator, then click on the button "Configure SSL v3", I see
that 128 bit encryption is enabled.  Also, when I click on Help -> About
Communicator, I see "This version supports U.S. security with RSA Public
Key Cryptography, MD2, MD5, RC2-CBC, RC4, DES-CBC, DES-EDE3-CBC ."

In other words, the latest Netscape provided by Red Hat provides full
strength encryption.

> When I run it, it tells me that /usr/bin/netscape
> appears to be a shell script or a batch file.

Yes, it is.

> Is this a problem with
> Fortify not being up to date or do I have another problem I am not aware
> of?

You can find the executable with:
 rpm -ql netscape-communicator | xargs file | grep executable
/usr/lib/netscape/movemail:                             ELF 32-bit LSB
executable, Intel 80386, version 1, dynamically linked (uses shared libs),
not stripped
/usr/lib/netscape/netscape-communicator:                ELF 32-bit LSB
executable, Intel 80386, version 1, dynamically linked (uses shared libs),
stripped

So if you actually did need to, you could run Fortify on
/usr/lib/netscape/netscape-communicator

> The version of Fortify says it is okay up to v4.7.

I suspect that you don't need to use it anymore, thanks to some semblance
of sanity returning to US law on export of encryption, and the expiry of
the RSA patent.

I hope that you find this helpful.

--
Nick Urbanik, Dept. of Computing and Mathematics
Hong Kong Institute of Vocational Education (Tsing Yi)
email: [EMAIL PROTECTED]
Tel:   (852) 2436 8576, (852) 2436 8579   Fax: (852) 2435 1406
pgp ID: 7529555D fingerprint: 53 B6 6D 73 52 EE 1F EE EC F8 21 98 45 1C 23 7B





_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list