[EMAIL PROTECTED] wrote:
Sir,

How do I check to see what version of Open SSL that I have on my system? I am trying to answer the attached vulnerability.

If you have the executable for the superapp then use:
  openssl version -a

If you don't then you can
  strings path-to-library | grep ' part of '
and look at the strings generated

e.g. for an old Ubuntu build

ldd /usr/bin/openssl
(to figure out the path to the library)

strings /usr/lib/i686/cmov/libssl.so.0.9.8  | grep ' part of '

SSLv2 part of OpenSSL 0.9.8c 05 Sep 2006
SSLv3 part of OpenSSL 0.9.8c 05 Sep 2006
TLSv1 part of OpenSSL 0.9.8c 05 Sep 2006
DTLSv1 part of OpenSSL 0.9.8c 05 Sep 2006

If you have code:

Look in crypto/opensslv.h (or whereever you place placed the include file during installation) and see OPENSSL_VERSION_NUMBER

grep OPENSSL_VERSION_ /usr/include/openssl/opensslv.h

Tim.

Attachment: PGP.sig
Description: PGP signature

Reply via email to