heartbleed - Read For Learn

Heartbleed: how to reliably and portably check the OpenSSL version?

Based on the date displayed by your version of OpenSSL, it seems you are seeing the full version displayed there. Open SSL 1.0.1 was released on March 14th, 2012. 1.0.1a was released on April 19th of 2012. So, I’m going to go ahead and assert that openssl version -a is the proper, cross-distro way to … Read more

Heartbleed: What is it and what are options to mitigate it?

First, before freaking out, be sure that you understand whether or not this vulnerability actually applies to you. If you have a server, but have never actually had any applications using TLS, then this is not a high-priority thing for you to fix. If, on the other hand, you have ever had TLS-enabled applications, well … Read more