Today, this hole is quite popular. I quickly tested my website and there was a problem. The simple repair process is as follows (CentOS 6.5 ):
Yum search openssl # returned Updating: openssl x86_64 1.0.1e-16. el6_5.7 updates 1.5 M Updating for dependencies: openssl-devel x86_64 1.0.1e-16. el6_5.7 updates 1.2 M
It seems that the version is still relatively new. Then, run yum install openssl # and restart nginx/etc/init. d/nginx restart # The test vulnerability has been fixed. I originally wanted to compile and install the source code, because the above process has been fixed and the compilation has not been completed. If the yum method does not work, try the following installation:
Wget http://www.openssl.org/source/openssl-1.0.1g.tar.gz cd openssl-1.0.1g./config make & make install/etc/init. d/nginx restart # restart nginx
Test whether it has been fixed ~ _ ^