On Wed, 9 Apr 2014, Johnny Hughes wrote:
1. Besides doing the updates, you should replace any certificates
using SSL or TLS that are openssl based. This includes VPN,
HTTPD, etc. See http://heartbleed.com/ for more info on impacted
keys.
The OpenVPN folks note that if your configuration uses the additional
TLS auth configuration bits (tls-auth), then OpenVPN certificates were
not exposed to a heartbeat attach.
--
Paul Heinlein
heinlein@xxxxxxxxxx
45°38' N, 122°6' W
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
