升级OpenSSL (heartbleed漏洞修复方案)

安装ZLIB支持包:

yum install -y zlib

编译安装新版openssl

wget https://www.openssl.org/source/openssl-1.0.1g.tar.gztar zxvf  openssl-1.0.1g.tar.gzcd openssl-1.0.1g./config shared zlibmake make install mv /usr/bin/openssl /usr/bin/openssl.OFFmv /usr/include/openssl /usr/include/openssl.OFFln -s /usr/local/ssl/bin/openssl /usr/bin/opensslln -s /usr/local/ssl/include/openssl /usr/include/opensslecho “/usr/local/ssl/lib” >> /etc/ld.so.confldconfig -v

查看openssl版本,确认已经升级

openssl version -a

查看依赖的服务,需要重启这些服务

lsof | grep libssl | awk '{print $1}'| sort | uniq

一般需要重启的有:httpd、nginx、pureftp 等

升级OpenSSL (heartbleed漏洞修复方案)

相关文章:

你感兴趣的文章:

标签云: