CentOS6.5的openssl升級:(修復心臟漏血漏洞)linux
[root@linux1 ~]# rpm -qi openssl|grep Version
Version : 1.0.1e Vendor: CentOSapp
openssl升級:
OpenSSL 須要更新至1.0.2g或1.0.1s
yum update "openssl*" #沒有更新版本工具
使用源碼安裝openssl:
wget https://www.openssl.org/source/openssl-1.0.1g.tar.gz
tar xf openssl-1.0.1g.tar.gz
cd openssl-1.0.1g
./config
make
make installssl
替換原來的openssl:
find / -name openssl
mv /usr/bin/openssl /usr/bin/openssl.bak
cp /root/openssl-1.0.1g/apps/openssl /usr/bin/
openssl version
OpenSSL 1.0.1g 7 Apr 2014get
檢測工具檢測:
[root@linux1 ~]# rkhunter -c -sk
Checking version of OpenSSL [ OK ]
Checking version of OpenSSH [ OK ]源碼