How to upgrade OpenSSL in CentOS 6 + Heartbleed

Folow the steps to upgrade OpenSSL in CentOS 6 server

mv /usr/bin/openssl /usr/bin/openssl.backup
cd /usr/src
wget https://www.openssl.org/source/openssl-1.0.1g.tar.gz
tar -zxf openssl-1.0.1g.tar.gz
cd openssl-1.0.1g
./config –prefix=/usr/local/myopenssl
make
make install
ln -s /usr/local/myopenssl/bin/openssl /usr/bin/openssl

Check the version
-=-=-=-
openssl version

Then you need to stop and start apache

/etc/init.d/httpd stop
/etc/init.d/httpd start

Check the SSH version and see the OpenSSL version it is compiled with.

sshd -v
OpenSSL 1.0.1c 10 May 2012

You may need to recompile SSH too with the new OpenSSL.

cd /usr/local/src/
wget ftp.aist-nara.ac.jp/pub/Linux/gentoo/distfiles/openssh-6.0p1.tar.gz
tar -zxf openssh-6.0p1.tar.gz
cd openssh-6.0p1
./configure –prefix=/usr –sysconfdir=/etc/ssh –with-ssl-dir=/usr/src/openssl-1.0.1g –with-pam –with-libs=-ldl –without-zlib-version-check –with-tcp-wrappers
make
make install
/sbin/service sshd restart

0 Bu dökümanı faydalı bulan kullanıcılar:

Diğer Dökümanlar

Network monitoring on Linux
Network monitoring on Linux This post mentions some linux command line tools that can be used to monitor the network usage. These tools monitor the traffic flowing through network interfaces and...
df -i /tmp folder is full
Install tmwatchftp://ftp.muug.mb.ca/mirror/centos/6.5/os/x86_64/Packages/tmpwatch-2.9.16-4.el6.x86_64.rpmthen run /usr/sbin/tmpwatch -am 1 /tmp/nginx_clientthen add cron filelike this0 */1 *...
Accessing a Fedora Logical Volume from Ubuntu
A while back, I started experimenting with Ubuntu after playing with Fedora. I decided to jump to Ubuntu and needed to move data from the Fedora-managed logical volume to Ubuntu. Here's what I...
How to create a partition size larger than 2TB on Linux
How to create a partition size larger than 2TB on Linux Parted is a GNU utility and used to create, manipulate and delete the hard disk partitions. Select the drive that you need to create #...
RSZDT
what is RSZDT mean ? PROCESS STATE CODES -different values that the s, stat and state output specifiers(header “STAT” or “S”) will display to describe the state of a...