Page 1 of 1
Forum

Welcome to the Tweaking4All community forums!
When participating, please keep the Forum Rules in mind!

Topics for particular software or systems: Start your topic link with the name of the application or system.
For example “MacOS X – Your question“, or “MS Word – Your Tip or Trick“.

Please note that switching to another language when reading a post will not bring you to the same post, in Dutch, as there is most likely no translated for the post!





Share:
Notifications
Clear all

How to manually test OpenSSL Heartbleed vulnerability?  

  RSS

Hans
 Hans
(@hans)
Noble Member Admin
Joined: 7 years ago
Posts: 1437
October 30, 2014 10:35 AM  

To test if your Linux setup has a heartbleed vulnerability in OpenSSL, you can try the following from the command line (terminal, shell):

openssl s_client -connect domain.com:443 -tlsextdebug 2>&1 | grep 'server extension "heartbeat" (id=15)' || echo safe

This SHOULD result in "safe", indicating that your setup is OK.


ReplyQuote
Hans
 Hans
(@hans)
Noble Member Admin
Joined: 7 years ago
Posts: 1437
October 30, 2014 10:39 AM  

Some more info:

- Alternative way of testing can be done through this website: https://filippo.io/Heartbleed/

- More Heartbleed info can be found here: http://heartbleed.com/


ReplyQuote
Share: