We are still having heartbleed issues with one of our servers. We did the update with yum and restarted apache and any service that was using the vulnerable version of openssl. When we test our site to see if it is still vulnerable it says that it is. Our server has apache 2.4.7 compiled from source. Does anyone have any ideas of why it would say that we are still using the vulnerable version of Openssl? If I do a "rpm -qa | grep ssl" I get the following:
nss_compat_ossl-0.9.6-1.el6.x86_64
pyOpenSSL-0.10-2.el6.x86_64
openssl-1.0.1e-16.el6_5.7.x86_64
openssl-devel-1.0.1e-16.el6_5.7.x86_64