RHEL 3 OpenSSL package concern

2006-08-14 Thread Mark Pearson
We were looking to upgrade to latest and greatest of OpenSSL to plug what we thought were vulnerabilities. We are running 0.9.7a, according to when we pass the 'version' flag. However, according to RedHat the package we have installed, via up2date, is patched to cover the latest vulnerabilities u

CHecking the version of OpenSSL

2006-08-10 Thread Mark Pearson
Does anyone know how to externally check what version of OpenSSL is running a server?  I mean without connecting to the server via the shell but perhaps by a browser and checking the headers?   Mark T. Pearson Assistant Manager of Web Administration UFT Welfare Fund 52 Broadway, 8th Flo

CHecking the version of OpenSSL

2006-08-10 Thread Mark Pearson
Does anyone know how to externally check what version of OpenSSL is running a server?  I mean without connecting to the server via the shell but perhaps by a browser and checking the headers?   Mark T. Pearson Assistant Manager of Web Administration UFT Welfare Fund 52 Broadway, 8th Flo

SSL_accept wierdness for TLS and SSLv3 methods only

2003-05-29 Thread Mark Pearson
y sockets are OK (after all it works for V2). Anybody seen anything like this or got some good tips on debug strategies... Many thanks in advance Mark Pearson __ OpenSSL Project http://www.openssl