小编seb*_*ian的帖子

我需要为 CVE-2014-0160 更新 mod_ssl 吗?

我已在 Ubuntu 12.04.4 LTS 上将 OpenSSL 更新为 1.0.1 g 版:

user@server# dpkg -l |grep openssl
ii  openssl                              1.0.1-4ubuntu5.12                   Secure Socket Layer (SSL) binary and related cryptographic tools
ii  python-openssl                       0.12-1ubuntu2.1                     Python wrapper around the OpenSSL library
Run Code Online (Sandbox Code Playgroud)

问题:我也需要更新 Apache2 mod_ssl 吗?如果是,如何?

user@server# strings /usr/lib/apache2/modules/mod_ssl.so | grep -i "openssl"
OPENSSL_add_all_algorithms_noconf
OPENSSL_load_builtin_modules
OPENSSL_1.0.1
OPENSSL_1.0.0
SSLFIPS invalid, rebuild httpd and openssl compiled for FIPS
OpenSSL 1.0.1 14 Mar 2012
OpenSSL
AH01894: Unable to initialize TLS servername extension callback (incompatible OpenSSL version?)
AH01913: Unable to …
Run Code Online (Sandbox Code Playgroud)

apache2 mod-ssl

5
推荐指数
2
解决办法
4120
查看次数

标签 统计

apache2 ×1

mod-ssl ×1