Question about OpenSSL of self compiled versions
Posted: Mon May 05, 2014 2:10 pm
On the SoftEther Projectsite, I found the information, that SoftEther use OpenSSL 0.9.8x.
But as I compiled SoftEther on a "virgin" Linux, it failed because some OpenSSL-Headerfiles are missing. So, I installed OpenSSL (libssl-dev) and all works fine.
Does this mean, that a self-compiled version could be heardbleed vulnerable, if compiled with a old/unsafe version of OpenSSL?
But as I compiled SoftEther on a "virgin" Linux, it failed because some OpenSSL-Headerfiles are missing. So, I installed OpenSSL (libssl-dev) and all works fine.
Does this mean, that a self-compiled version could be heardbleed vulnerable, if compiled with a old/unsafe version of OpenSSL?