[afnog] Time to update openssl

[Hugo Lombard]

On Thu, Apr 10, 2014 at 10:36:32AM +0300, Lomayani S. Laizer wrote:
> I tried the site and command test on same servers and they give different
> results. site report the server is ok but command test says the server is
> affected. which one to trust?
> 

The command below will give false positives if the site supports
hearbeats.

> >         The following should work as well:
> >
> >         openssl s_client -connect google\.com:443  -tlsextdebug 2>&1| grep
> > 'server extension "heartbeat" (id=15)' || echo safe
> >

-- 
Hugo Lombard
   .___.
   (o,o)
   /)  )
 ---"-"---