Package: openssl-blacklist Version: 0.4.2 When run on a file it cannot read (e.g. because the user doesn't have read permission on that file), openssl-vulnkey says /some/file is not x509, req or rsa (skipping) which leads to think that one is safe (the file is not a key), particularly if run as a wrapper that launches it on a long list possibly existing files.
It should says something like: ERROR: cannot open /some/file: permission denied Maybe the file not existing should not be an error, only an informational message like the current one (but then, say "no such file"), not "not x509, req or rsa", which IMHO should be reserved for a file that has been successfully read, but not a key. -- Lionel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]