Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

There are a lot of embedded Linux device that are built on Linux, that are used exactly for security purposes, like gateways, if I check OpenSSL I get:

openssl version -a

gets -»

OpenSSL 1.0.0k 5 Feb 2013

But this maybe patched or merged and I don't have access to the sources, how can I check that my system is not vulnerable without relying on openssl version -a

share|improve this question
    
SSH is not affected, if you mean SSL, there is a topic with 5 answers which explains how to check it. –  NickW Apr 9 at 9:00
    
@NickW SSH doesn't use SSL, still there could be issues with https and VPNs? –  Eduard Florinescu Apr 9 at 9:01
    
possible duplicate of Heartbleed: are services other than HTTPS affected? –  Jacob Apr 9 at 9:02
    
@Jacob Please read the body, I want to know how if its affected without relying on the version number... –  Eduard Florinescu Apr 9 at 9:04
    
You might also want to check this: serverfault.com/questions/587324/… –  Eduard Florinescu Apr 10 at 5:34

2 Answers 2

up vote 3 down vote accepted

There is a perl script that allows you to check our own services. There are also online tools. One more.

share|improve this answer

Qualys SSL Labs has a very good SSL Test, which features Heartbleed tests as well, and generally servers as a good point in testing your own SSL Infrastructure for stuff like Forward Secrecy, BEAST Attacks, weak protocols and whatnot. And it's free.

https://www.ssllabs.com/ssltest/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.