$ openssl version
OpenSSL 1.0.1c 10 May 2012
I then compiled and installed Apache HTTP Server (version 2.2.23 with mod_ssl).
$ lwp-request -m HEAD myexample.com
200 OK
Connection: close
Date: Thu, 17 Jan 2013 20:29:44 GMT
Server: Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_jk/1.2.37
As you can see from above output, Apache isn't using the latest version of OpenSSL install on this machine. Why? How do I fix that?
The reason I need this is that for our server to be PCI compliant, it should be using the latest version of OpenSSL.
Thanks for your help!
|