1

There are a lot of embedded Linux device that are built on Linux, that are used exactly for security purposes, like gateways, if I check OpenSSL I get:

openssl version -a

gets -ยป

OpenSSL 1.0.0k 5 Feb 2013

But this maybe patched or merged and I don't have access to the sources, how can I check that my system is not vulnerable without relying on openssl version -a

MadHatter
  • 81,580
Eduard Florinescu
  • 859

2 Answers2

3

There is a perl script that allows you to check our own services. There are also online tools. One more.

neutrinus
  • 1,155
1

Qualys SSL Labs has a very good SSL Test, which features Heartbleed tests as well, and generally servers as a good point in testing your own SSL Infrastructure for stuff like Forward Secrecy, BEAST Attacks, weak protocols and whatnot. And it's free.

https://www.ssllabs.com/ssltest/

MichelZ
  • 11,238