Ask HN: Does Heartbleed affect CAs?

Posted by chacham15 on Friday April 11, 2014 @02:42AM
from the ask-hn dept.

If my understanding is correct the Heartbleed vulnerability affects any server running OpenSSL. Does this mean that root CAs need to update their root CA Certs? Should I be doing that manually somehow?

( 2 comments | on HN )

Re:Ask HN: Does Heartbleed affect CAs? by mballantyne on Friday April 11, 2014 @02:52AM (#7571541)

Heartbleed affects servers terminating TLS connections using certain versions of OpenSSL. It doesn't impact certificate operations a CA would be doing, and CA root certificates are kept far, far away from front end web servers that might run TLS. Usually in something like this: http://en.wikipedia.org/wiki/Hardware_security_module

[ Parent | on HN ]

Re:Ask HN: Does Heartbleed affect CAs? by chacham15 on Friday April 11, 2014 @03:49AM (#7571673)

Thanks

[ Parent | on HN ]