Results 1 to 4 of 4

Thread: How to Fix OpenSSL Heart Bleed Bug on Ubuntu Share/Save - My123World.Com!

  1. #1

    How to Fix OpenSSL Heart Bleed Bug on Ubuntu

    First check version of the openSSL

    Code:
    openssl version -b
    
    openssl version -a
    If it is already updated, then no need to worry about it . If your OpenSSL is not updated then execute following commands to update OpenSSL.

    Code:
    sudo apt-get update
    Once this finishes, upgrade openssl:

    Code:
    sudo apt-get upgrade openssl
    Regenerate your SSL certificate , follow the link to regenerating SSL Certificate

    Code:
     https://www.digitalocean.com/community/articles/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-12-04
    Video Guide :

    Code:
    https://www.youtube.com/watch?v=sq7Eib02Rb8
    Garage4Hackers bugs for the community , of the community

    We provide IT
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
    :
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
    |
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
    |
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
    |
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

  2. #2
    Security Researcher
    Join Date
    May 2011
    Location
    Pune, Maharashtra, India
    Posts
    237
    Blog Entries
    1
    After upgrade either restart the whole server or identify applications still using DELETED library using

    lsof -n | grep ssl | grep DEL
    Will list out application / services and users still using old libraries. Restart services first and then proceed with regeneration of certificates.


    Credits for the command goes to some fellow Internet user. (saw it at so many places hence can't pin point the originator for reference)
    Website :
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

    Blog :
    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

  3. #3
    Garage Addict 41.w4r10r's Avatar
    Join Date
    Jul 2010
    Location
    Pune
    Posts
    338
    Blog Entries
    3
    Haha.. Thats really awesome vulnerability and almost broke internet...

    and we were planning for SSL for G4H (just kidding)

  4. #4
    Quote Originally Posted by 41.w4r10r View Post
    Haha.. Thats really awesome vulnerability and almost broke internet...

    and we were planning for SSL for G4H (just kidding)
    so true, nothing a user could do apart from just waiting for the server to be patched..

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •