[Libwebsockets] [libwebsockets] #64: Heartbleed

Trac trac at libwebsockets.org
Mon Apr 14 10:36:58 CEST 2014


#64: Heartbleed
-------------------------------+-------------------------------------------
  Reporter:  dimitrirostavo    |      Owner:
      Type:  enhancement       |     Status:  new
  Priority:  major             |  Milestone:
 Component:  libwebsockets     |    Version:
  library                      |   Keywords:  heartbleed, security, openssl
Resolution:                    |
-------------------------------+-------------------------------------------

Comment (by agreen):

 If you built your application to dynamically link to openssl (the default
 for Linux) then there's nothing extra to do than just update your OS
 openssl libs.

 On linux you can confirm dynamic library bindings using ldd

 [agreen at supple build]$ ldd `which libwebsockets-test-server`
         linux-vdso.so.1 =>  (0x00007fff525fe000)
         libssl.so.10 => /lib64/libssl.so.10 (0x00007fc4e68a0000)
 ...

 [agreen at supple build]$ rpm -q --whatprovides /lib64/libssl.so.10
 openssl-libs-1.0.1e-44.fc21.x86_64

 If for some reason you static-built your app, well, you'll need to update
 your openssl libs including the .a and then recook your app.

 On Windows, no idea.

--
Ticket URL: <http://libwebsockets.org/trac/libwebsockets/ticket/64#comment:2>
libwebsockets <http://libwebsockets.org>
libwebsockets C library



More information about the Libwebsockets mailing list