Openssl brute-force vulnerability and emergency repair Guide

Source: Internet
Author: User
Tags openssl version

Openssl was another big event. in June 5, 2014, the SSL/TLS Man-in-the-Middle Vulnerability allowed attackers to intercept malicious intermediate nodes to encrypt and decrypt data, at the same time, the ssl client that uses weak keys is forced to be exposed to malicious nodes. When the software uses the affected version of OpenSSL, there is a risk of tampering during encrypted communication such as content and Identity Authentication through web browsing, email, and VPN.

The upgrade method of openssl is introduced here. The latest version that is not affected currently is OpenSSL 1.0.1h,

Wget http://www.openssl.org/source/openssl-1.0.1h.tar.gz

Zlib is required here. If zlib is not installed, you can directly install yum zlib.

Compile and install

./Config shared zlib

Make & make install

Rename the old openssl File

Mv/usr/bin/openssl. bak

Mv/usr/include/openssl. bak

Reference the newly installed openssl File

Ln-s/usr/local/ssl/bin/openssl/usr/bin/openssl

Ln-s/usr/local/ssl/include/openssl/usr/include/openssl

Configure the index path of the Library File

Echo "/usr/local/ssl/lib">/etc/ld. so. conf

Load library files

Ldconfig-v

Verify

Openssl version




Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.