How to test and confirm OpenSSL is updated for Nginx and Ruby on Ubuntu 12.04 #heartbleed aaronparecki.com/articles/20…

How to test and confirm OpenSSL is updated for Nginx and Ruby on Ubuntu 12.04

A quick guide to updating OpenSSL on Ubuntu 12.04 running Nginx and Ruby and verifying that your system is safe from the Heartbleed bug.

aaronparecki.com
2
4
2
@aaronpk you can also do this to get the specific openssl version: strings /lib/x86_64-linux-gnu/libssl.so.1.0.0 | grep "^OpenSSL "
1
@mattb Unfortunately that *also* just returns "OpenSSL 1.0.1 14 Mar 2012". Thanks Ubuntu. (aaron.pk/r4VU5)
1
@aaronpk on my box I got "OpenSSL 1.0.1e 11 Feb 2013". perhaps you really do have exactly version 1.0.1?
1
Replying to @mattb
@mattb Are you running Ubuntu 12.04? (aaron.pk/r4VU6)

Apr 9, 2014 · 12:10 AM UTC

2
Replying to @aaronpk
@aaronpk I already upgraded that box to 13.10 in order to upgrade to the fixed version listed in ubuntu.com/usn/usn-2165-1/

USN-2165-1: OpenSSL vulnerabilities | Ubuntu security notices | Ubuntu

Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.

ubuntu.com
1
@mattb Yeah it seems to be unique to 12.04 LTS. I need to use the LTS version, not willing to upgrade to 13 tho. (aaron.pk/r4VU7)
1
more replies
Replying to @aaronpk
@aaronpk it was a quick upgrade because the box just runs nginx and everything else is in docker containers.