Check your server openssl Version
openssl version
Verify this version is vulnerable in openssl.com or Check through the following tools
openssl version
Verify this version is vulnerable in openssl.com or Check through the following tools
If your server is affected take immediate action
Update your openssl and libssl version
sudo apt-get install --only-upgrade openssl
sudo apt-get install --only-upgrade libssl1.0.0
Restart all the services that are depends on openssl and libssl(ex: apache2,postgresql.sendmail etc..)
Reissue your ssl certificate through following steps
Create new private key and csr.
openssl genrsa -des3 -out /etc/ssl/private/privatekeyfilename.key
openssl req -new -key /etc/ssl/private/privatekeyfilename.key -out /etc/ssl/certs/outputfilename.csr
Then send this to your ssl provider to reissue the ssl certificate.
Once you received the ssl certificate from your ssl provider install it in your server.
Request to all your user to change their password.
Now you and your user will be safe!!!
No comments:
Post a Comment