Due to heartbleed vulnerability I have recompiled apache with non vulnerable latest openssl(I had to keep old vulnerable openssl due to some dependency problem). It is running fine and when doing heartbleed test for mydomain.com it says 'seems fixed or unaffected'. But if I do
apachectl graceful and take test for heartbleed it says mydomain.com is vulnerable. If I do
/usr/local/etc/rc.d/apache2 restart or
apachectl restart there is no problem.
1)My question is why it takes old openssl library when doing
apachectl graceful only?
2)What is the difference between
apachectl restart and
apachectl graceful when accessing openssl libraries?