← Back to context

Comment by earless1

12 years ago

On my CentOS boxes I ran 'yum list | grep openssl'

This is the standard command:

  $ openssl version

  > OpenSSL 1.0.1f 6 Jan 2014

  • @stormbrew is correct about ubuntu, use -a or -v -b

        openssl version -v -b
    
        OpenSSL 1.0.1 14 Mar 2012
        built on: Wed Jan  8 20:45:51 UTC 2014

    • I'm totally confused by this. I'm running ubuntu LTS 12.04 and did

          sudo aptitude update
          sudo aptitude upgrade openssl
      

      and then ran

          openssl version -a
      

      and got the same results as you. How can it be built on January 8th if the patch was just made today?

      [EDIT] running

          sudo aptitude upgrade
      

      upgraded properly and now I'm getting a version that was compiled earlier today. I'm guessing I needed to update another package as well. Probably `libssl`?

      3 replies →

  • As far as I can tell, on ubuntu this reports "OpenSSL 1.0.1 14 Mar 2012" for all ubuntu versions, including the fixed one.

    • With "openssl version -a" you can see the built time.

        root@x ~ # openssl version -a
        OpenSSL 1.0.1 14 Mar 2012
        built on: Mon Apr  7 20:33:29 UTC 2014

    • Same here.

      I got a "security warning" update when I logged in to the server (good), ran apt-get and installed, did openssl version, got the string as noted above (which seemed just a tad out of date).

      So... I built and installed from source, and got... the same string.

      Annoying.