centos漏洞修复方法总结（centos系列教程之四心脏出血漏洞）

【centos系列教程之四】心脏出血漏洞，openssl漏洞修复

openssl漏洞测试地址：

https://filippo.io/Heartbleed ;

centos

wget http://www.openssl.org/source/openssl-1.0.1h.tar.gz ;

tar zxvf openssl-1.0.1h.tar.gz

cd openssl-1.0.1h

./config --prefix=/usr/local/openssl

make && make install

mv /usr/bin/openssl /usr/bin/openssl.OFF

mv /usr/include/openssl /usr/include/openssl.OFF

ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl

ln -s /usr/local/openssl/include/openssl /usr/include/openssl

echo "/usr/local/openssl/lib">>/etc/ld.so.conf

ldconfig -v

openssl version -a

重启 nginx apache等相关ssl服务

esxi 修复办法，官方地址

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2076225

5.5版本升级地址

http://www.vmware.com/security/advisories/VMSA-2014-0004.html