Sample Header Ad - 728x90

OpenSSL 1.0.1j - "POODLE" vulnerability fix (upgrade) on RHEL 6.5

1 vote
2 answers
4151 views
I've got a problem when I upgraded my OpenSSL on RHEL 6.5. The OpenSSL is missing the library libcrypto.so.10. Instead the openssl 1.0.1j created lib is libcrypto.so.1.0.0. I've made a soft link, but it still does not work for other packages using libcrypto.so.10. Does anyone have experience on this problem? **Explanation (addendum/edit):** this is required info since many will be looking to use the 1.0.1j version directly from the OpenSSL package to escape the latest (2014.10.15) "POODLE" vulnerability in OpenSSL. If you get the tar.gz file from openssl.org at this time, you should not have a problem. There previously was a problem for a short time and that publication may still exist on other sites, so avoid taking down the file other than at openssl.org: openssl downloads . Please read through the SSL3 warning in the @jvp answer regarding RPM's since the updates do not completely solve server problems that arise when servers permit such connections. a discussion of this additional vulnerability can be found at: ncas division of us-cert.gov See the answer regarding using Red Hat based RPM's for EL6 and EL7. Look to your /usr/lib directory for 32-bit and /usr/lib64 for 64 bit and the layout should be as follows: - libcrypto.a - libcrypto.so -> libcrypto.so.1.0.1j - libcrypto.so.10 -> libcrypto.so.1.0.1j - libcrypto.so.1.0.1j - .libcrypto.so.1.0.1j.hmac - .libcrypto.so.10.hmac -> .libcrypto.so.1.0.1j.hmaclibssl.a - libssl.so -> libssl.so.1.0.1j - libssl.so.10 -> libssl.so.1.0.1j - libssl.so.1.0.1j - .libssl.so.1.0.1j.hmac - .libssl.so.10.hmac -> .libssl.so.1.0.1j.hmac There are also the lib sub-directories openssl and package, but these have never been a problem.
Asked by hungwar (11 rep)
Sep 20, 2014, 02:04 PM
Last activity: Oct 17, 2014, 09:32 PM