OpenSSL fixed on CentOS?
New on LowEndTalk? Please read our 'Community Rules' by clicking on it in the right menu!

OpenSSL fixed on CentOS?

I have been following heartbleed bug and was curious about the fix(even though I do not use https). CentOS has issued a fix but I am not getting the update.

$openssl version OpenSSL 1.0.1e-fips 11 Feb 2013

I have addeed fedora epel to my yum.repos.d and enabled it.

Comments

  • JohnRoeJohnRoe Member
    edited April 2014

    see the build date. it should be April 8

    openssl version -a

    this is mine

    OpenSSL 1.0.1e-fips 11 Feb 2013

    >

    built on: Tue Apr 8 02:39:29 UTC 2014

    Thanked by 1sharuu

    Sorry for my bad English

  • NickMNickM Member

    Run rpm -q openssl

    You should have version 1.0.1e-16.el6_5.7 or later. "openssl version" will still show 1.0.1e because that's the version that CentOS is using. The fix is a patch on top of that version, so the version number does not get incremented.

    Thanked by 1sharuu
  • psycholyzern said: openssl version -a

    built on: Tue Apr 8 02:39:29 UTC 2014

    You are right :)

    $rpm -q openssl openssl-1.0.1e-16.el6_5.7.x86_64

    Looks like I should read more before posting on forums!

    Thanked by 1mee2
  • @sharuu said:
    Looks like I should read more before posting on forums!

    Indeed :D

    Sorry for my bad English

Sign In or Register to comment.