perfSONAR Announcements

[Andrew Lake <>]

Hi all,

The perfSONAR Team just wanted to make everyone aware of a new SSL 
vulnerability that’s out there today, dubbed Logjam: 
https://weakdh.org/sysadmin.html. Your perfSONAR hosts should NOT be 
vulnerable to this attack. The Apache configuration installed by the Toolkit 
disables the cipher suites in question by default. See the resource above for 
more details. There are no further actions required on your part, we just 
wanted to make everyone aware in case they saw something on the vulnerability 
and were wondering if their host was affected. You can also go to 
https://weakdh.org/sysadmin.html to check your host (perfSONAR or otherwise) 
if you are worried a machine may be vulnerable. Please let us know if you 
have any questions. 

Thank you,
Andy Lake