Wednesday, 2 July 2014

Steps to resolve Heartbleed Vulnerability

Check your server openssl Version

openssl version

Verify this version is vulnerable in openssl.com or Check through the following tools


If your server is affected take immediate action

Update your openssl and libssl version

sudo apt-get install --only-upgrade openssl
sudo apt-get install --only-upgrade libssl1.0.0


Restart all the services that are depends on openssl and libssl(ex: apache2,postgresql.sendmail etc..)

Reissue your ssl certificate through following steps

Create new private key and csr. 

openssl genrsa -des3 -out /etc/ssl/private/privatekeyfilename.key

openssl req -new -key /etc/ssl/private/privatekeyfilename.key -out /etc/ssl/certs/outputfilename.csr


Then send this to your ssl provider to reissue the ssl certificate.

Once you received the ssl certificate from your ssl provider install it in your server.

Request to all your user to change their password.

Now you and your user will be safe!!!




No comments:

Post a Comment