HeartBleed issues – Patching OpenSSL 1.0.1g

Scenario :


Version of Operating System : Ubuntu 12.04 
Hosting Provided : Microsoft Azure
Purpose : This server is installed with Open VPN Access sever and it used for accessing cloud services under VPN Connections.

Problem :
Open VPN is using OpenSSL, recently http://heartbleed.com/ issues have been discovered. 

Solution :

Fix 1 : Download and install.
Is to patch the version of OpenSSL with 1.0.1g version.
Can be downloaded from http://www.openssl.org/source/

Fix 2:

Update the security patch with ubuntu updates.

Login as root / admin user . Run the following command.
$ sudo apt-get update
$ sudo apt-get dist-upgrade
After security updates , Please reboot the machine. 
$ sudo reboot now
This is the Patched version :: 1.0.1-4ubuntu5.12
Verification:
$ openssl version -a
you should be able to see the package updated dated to 7th April 2014.
Secure and Be Happy !! 




Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.