Re: Upgrading OpenSSL on RHEL5

2014-04-24 Thread LOKESH JANGIR
Hi Shruti, As per openssl, version 0.98e is not infected with hearbleed issue. You can check on below link. http://www.openssl.org/news/secadv_20140407.txt Regards, Lokesh Jangir On Thu, Apr 24, 2014 at 6:47 PM, Shruti Palshikar shr...@buysidefx.comwrote: Thanks everyone for the help, does

seems openssl version 1.0.1g also infected

2014-04-14 Thread LOKESH JANGIR
restarted apache service and server many times after installation. But still it is showing my website vulnerable. Can you please guide me what am i missing now ? Thanks and Regards, Lokesh Jangir

Re: seems openssl version 1.0.1g also infected

2014-04-14 Thread LOKESH JANGIR
) libdl.so.2 = /lib64/libdl.so.2 (0x7ff2d5c41000) /lib64/ld-linux-x86-64.so.2 (0x7ff2d7a09000) libuuid.so.1 = /lib64/libuuid.so.1 (0x7ff2d5a3c000) libfreebl3.so = /lib64/libfreebl3.so (0x7ff2d57c6000) Please have a look and help me. Regards, Lokesh Jangir

Re: seems openssl version 1.0.1g also infected

2014-04-14 Thread LOKESH JANGIR
Hi Rainer, Yes, apache was running with the old library, i have moved this out, and copied new libssl library from new openssl installation folder. But it is not working and now i am unable to start apache. Now what to do with this ? Regards, Lokesh Jangir On Mon, Apr 14, 2014 at 2:52 PM

Re: seems openssl version 1.0.1g also infected

2014-04-14 Thread LOKESH JANGIR
folder and rename this as .so ? Regards, Lokesh Jangir On Mon, Apr 14, 2014 at 4:31 PM, Fedor Indutny fe...@indutny.com wrote: So, considering that it fails to start now. Could you please verify that `ls -la /lib64/libcrypt.so.1` is still valid? Fedor. On Mon, Apr 14, 2014 at 2:53 PM

Re: seems openssl version 1.0.1g also infected

2014-04-14 Thread LOKESH JANGIR
-s /path/to/new/libcrypto.so.1 /lib64/libcrypt.so.1` Cheers, Fedor. On Mon, Apr 14, 2014 at 3:13 PM, LOKESH JANGIR lk.jangi...@gmail.comwrote: Hi Fedor, Yes i did not move this file out. and i can see the output of ls -la /lib64/libcrypt.so.1 libcrypt.so - ../../lib64/libcrypt.so.1

Re: seems openssl version 1.0.1g also infected

2014-04-14 Thread LOKESH JANGIR
...@iam.tj wrote: On 14/04/14 10:42, LOKESH JANGIR wrote: I am using Ubuntu, Amazon ami with apache 2.0 and mod_ssl installed. I The oldest still-supported Ubuntu version - 10.04 Lucid Lynx - ships with: apache2.2-bin (2.2.14-5ubuntu8.13) [security] Hi Fedor, Thanks for the reply. My httpd