[afnog] Time to update openssl
Phil Regnauld
regnauld at nsrc.org
Thu Apr 10 09:22:54 UTC 2014
Hugo Lombard (hal) writes:
>
> The command below will give false positives if the site supports
> hearbeats.
>
> > > The following should work as well:
> > >
> > > openssl s_client -connect google\.com:443 -tlsextdebug 2>&1| grep
> > > 'server extension "heartbeat" (id=15)' || echo safe
Oh, and if the version of SSL on the machine you run it from doesn't
support heartbeats, it won't work either.
More information about the afnog
mailing list