News for hackers. Stuff that matters.

A comment on Test your server for the Heartbleed bug.

Re:Test your server for the Heartbleed bug by kukkukb on Tuesday April 08, 2014 @03:37AM (#7551940)
I have a bunch of servers on Ubuntu 12.04LTS. Did the test. Came back as vulnerable. Then did an apt-get upgrade, which upgraded a bunch of SSL services. Did the test again. Still vulnerable.

What else should I do?

[ Parent | on HN ]
Re:Test your server for the Heartbleed bug by robryk on Tuesday April 08, 2014 @05:04AM (#7552241)
Restart the services. Run:

  grep -l 'libssl.*deleted' /proc/*/maps
And restart all processes listed.
[ Parent | on HN ]
Re:Test your server for the Heartbleed bug by nmcfarl on Tuesday April 08, 2014 @12:39PM (#7554482)
On Ubuntu 12.04LTS you need to upgrade both 'libssl1.0.0' and 'openssl' - I’d check that the version of both is: 1.0.1-4ubuntu5.12

And then restart everything that comes back from a

     sudo lsof -n | grep ssl | grep DEL
[ Parent | on HN ]
Re:Test your server for the Heartbleed bug by kukkukb on Wednesday April 09, 2014 @12:07AM (#7557601)
Excellent! That did the trick. It was nginx and percona that also had to be restarted.
[ Parent | on HN ]