Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am bit confused between openssl & mod_ssl, so after hours of googling & readding documentation i have to post my query here .. I am on apache 2 which has ssl inbuilt, so where can i check which openssl version is being used .. is it the machine's openssl which apache is using or something which comes bundles with mod_ssl

$ openssl version
OpenSSL 1.0.0-fips 29 Mar 2010
$ uname -a

& when i hit the URL it shows following in response :

Server:Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.0.e

also when grep in

$ strings | grep -i openssl

OpenSSL 1.0.0e 6 Sep 2011

so why the difference in versions and from where it is picking that version.

share|improve this question
Tell us all the basic information about your system. Also, you should copy and paste instead of typing everything manually. – Michael Hampton Apr 13 '14 at 18:55
I am not Server admin, just web server admin so don't know how & when openSSL was installed on server or who & how installed apache, we are managing the same, so if you can let me know what details you need i can provide the same.. – Anuj Tomar Apr 13 '14 at 19:17
Well, if the response to the URL whose OpenSSL/1.0.0.e and shows the same, then Apache uses this version. – MichelZ Apr 13 '14 at 19:20
ok but the one installed in server is OpenSSL 1.0.0-fips 29 Mar 2010 .. so is the fips something else which incorporates 1.0.0.e - in here fips seems to be something different than others - – Anuj Tomar Apr 13 '14 at 19:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.