How to Upgrade from OpenSSL 0.9.8e to openssl-1.0.0e

Question

EDIT When I check the version in Putty "openssl version" it says Im using the new version but php is still showing the old?

I did the following with Putty and it looked like it worked but I am still seeing the old version when I view my phpinfo() file.

I am failing the PCI test and really need to get this fixed.

Do I need to delete the old version first? Is that safe?

Apache/2.2.20 (Unix) mod_ssl/2.2.20 OpenSSL/0.9.8e-fips-rhel5 
mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.8 

putty commands

* cd /usr/local/src
* wget -N http://www.openssl.org/source/openssl-1.0.0c.tar.gz
* tar -xzvf openssl-1.0.0c.tar.gz 
* cd openssl-1.0.0c
* ./config
* make
* make install
* alias cp=cp
* cp /usr/local/ssl/bin/openssl /usr/bin/openssl
* cd /usr/local/ssl/include
* ln -s /usr/local/ssl/include/openssl openssl

Answer 1

In addition to Ignacio's post:

http://blog.800hosting.com/tag/centos-redhat-rpm-pci-compliance/

http://stackoverflow.com/questions/1837145/pci-compliance-magento-php-version

Answer 2

Unfortunately the PCI compliance test is... naive, and only checks the version number. You need to find out which specific vulnerabilities it's looking for and then check the OpenSSL package changelog (rpm --changelog openssl) to verify that yes, those vulnerabilities have been patched.