OpenSSL CCS vulnerability (CVE-2014-0224) 漏洞

Experimental: This server is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable. Grade set to F.

出现以上问题解决方法是：

打过补丁的版本是0.9.8za，1.0.0m和1.0.1h

首先：
openssl version -a |head -2   查看版本是否有漏洞

下载地址

tar -zxf openssl-1.0.1h.tar.gz
cd openssl-1.0.1h
./config
make && make install
mv /usr/bin/openssl /usr/bin/openssl.OFF
mv /usr/include/openssl /usr/include/openssl.OFF
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl /usr/include/openssl
echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
ldconfig -v
openssl version –a   #查询版本