I checked a site with this tool and the result came back that " This server is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable."
I searched around and found that for not being vulnerable the version must be higher than this output:
OpenSSL 1.0.1 14 Mar 2012
built on: Mon Jun 2 19:37:18 UTC 2014
My current version is
OpenSSL 1.0.1c 10 May 2012
built on: Fri May 2 20:25:02 UTC 2014
I tried couple ways to upgrade my openssl like this and this but I still get the same version. For example when I execute the sudo apt-get dist-upgrade
I get this message:
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
The first time I run this command, packages were installed and I did reboot my machine with sudo reboot
.
Any clue how can I update my openSSL to avoid this vulnerability? Anything else I might be missing?