[afnog] Time to update openssl

Phil Regnauld regnauld at nsrc.org
Thu Apr 10 09:22:54 UTC 2014


Hugo Lombard (hal) writes:
> 
> The command below will give false positives if the site supports
> hearbeats.
> 
> > >         The following should work as well:
> > >
> > >         openssl s_client -connect google\.com:443  -tlsextdebug 2>&1| grep
> > > 'server extension "heartbeat" (id=15)' || echo safe

	Oh, and if the version of SSL on the machine you run it from doesn't
	support heartbeats, it won't work either.




More information about the afnog mailing list